VULNERABILITY INTELLIGENCE

CVE-2008-2382

CVSS score5 MEDIUM
EPSS probability6.62%
CISA KEVNot currently listed
Published2008-12-24
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to cause a denial of service (infinite loop) via a certain message.

Primary references