high
7.5
CWE
476
Advisory Published
CVE Published
CVE Published
Updated

CVE-2023-3354: Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service

First published: Wed Jun 21 2023(Updated: )

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.

Credit: secalert@redhat.com secalert@redhat.com secalert@redhat.com

Affected SoftwareAffected VersionHow to fix
QEMU qemu
Redhat Openstack Platform=13.0
Redhat Enterprise Linux=7.0
Redhat Enterprise Linux=8.0
Redhat Enterprise Linux=8.0
Redhat Enterprise Linux=9.0
QEMU qemu<8.1.0
QEMU qemu=8.1.0-rc0
QEMU qemu=8.1.0-rc1
Fedoraproject Fedora=38
ubuntu/qemu<1:4.2-3ubuntu6.28
1:4.2-3ubuntu6.28
ubuntu/qemu<1:6.2+dfsg-2ubuntu6.16
1:6.2+dfsg-2ubuntu6.16
ubuntu/qemu<1:7.2+dfsg-5ubuntu2.4
1:7.2+dfsg-5ubuntu2.4
debian/qemu<=1:3.1+dfsg-8+deb10u8<=1:5.2+dfsg-11+deb11u2
1:3.1+dfsg-8+deb10u12
1:5.2+dfsg-11+deb11u3
1:7.2+dfsg-7+deb12u5
1:8.2.3+ds-2

Remedy

https://bugzilla.redhat.com/show_bug.cgi?id=2216478

Remedy

https://gitlab.com/qemu-project/qemu/-/commit/10be627d2b5ec2d6b3dce045144aa739eef678b4

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

Frequently Asked Questions

  • What is CVE-2023-3354?

    CVE-2023-3354 is a vulnerability found in the QEMU built-in VNC server that allows an attacker to cause denial of service or potentially execute arbitrary code.

  • How does CVE-2023-3354 affect QEMU?

    CVE-2023-3354 affects the QEMU built-in VNC server, specifically when a client connects to the server.

  • What is the severity of CVE-2023-3354?

    The severity of CVE-2023-3354 is rated as high.

  • What is the impact of CVE-2023-3354?

    CVE-2023-3354 can result in denial of service or potentially allow an attacker to execute arbitrary code.

  • How can I mitigate CVE-2023-3354?

    To mitigate CVE-2023-3354, it is recommended to update QEMU to a patched version provided by the vendor or apply the recommended security patches.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203