Vulnerability-Lookup

RHSA-2015:1931

Vulnerability from csaf_redhat - Published: 2015-10-26 21:22 - Updated: 2026-06-28 12:26

Summary

Red Hat Security Advisory: qemu-kvm-rhev security update

Severity

Moderate

Notes

Topic: Updated qemu-kvm-rhev packages that fix one security issue are now available for Red Hat Enterprise Virtualization Hypervisor 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

Details: KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the user-space component for running virtual machines using KVM. It was found that the QEMU's websocket frame decoder processed incoming frames without limiting resources used to process the header and the payload. An attacker able to access a guest's VNC console could use this flaw to trigger a denial of service on the host by exhausting all available memory and CPU. (CVE-2015-1779) This issue was discovered by Daniel P. Berrange of Red Hat. All qemu-kvm-rhev users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2015-1779

It was found that the QEMU's websocket frame decoder processed incoming frames without limiting resources used to process the header and the payload. An attacker able to access a guest's VNC console could use this flaw to trigger a denial of service on the host by exhausting all available memory and CPU.

5.7 ()


                
                  AV:A/AC:M/Au:N/C:N/I:N/A:C

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 9 products

Product	Version	Remediation
Unresolved product id: 7Server-RHEV-Agents-7:libcacard-devel-rhev-10:2.1.2-23.el7_1.10.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHEV-Agents-7:libcacard-rhev-10:2.1.2-23.el7_1.10.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHEV-Agents-7:libcacard-tools-rhev-10:2.1.2-23.el7_1.10.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHEV-Agents-7:qemu-img-rhev-10:2.1.2-23.el7_1.10.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHEV-Agents-7:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.10.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.10.src	—	Vendor Fix fix
Unresolved product id: 7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.10.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHEV-Agents-7:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.10.x86_64	—	Vendor Fix fix
Unresolved product id: 7Server-RHEV-Agents-7:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.10.x86_64	—	Vendor Fix fix

Threats

Impact Moderate

References

8 references

URL	Category
https://access.redhat.com/errata/RHSA-2015:1931	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=1199572	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2015-1779	self
https://bugzilla.redhat.com/show_bug.cgi?id=1199572	external
https://www.cve.org/CVERecord?id=CVE-2015-1779	external
https://nvd.nist.gov/vuln/detail/CVE-2015-1779	external

Acknowledgments

Red Hat Daniel P. Berrange

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated qemu-kvm-rhev packages that fix one security issue are now\navailable for Red Hat Enterprise Virtualization Hypervisor 7.\n\nRed Hat Product Security has rated this update as having Moderate security\nimpact. A Common Vulnerability Scoring System (CVSS) base score, which\ngives a detailed severity rating, is available from the CVE link in the\nReferences section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "KVM (Kernel-based Virtual Machine) is a full virtualization solution for\nLinux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the\nuser-space component for running virtual machines using KVM.\n\nIt was found that the QEMU\u0027s websocket frame decoder processed incoming\nframes without limiting resources used to process the header and the\npayload. An attacker able to access a guest\u0027s VNC console could use this\nflaw to trigger a denial of service on the host by exhausting all available\nmemory and CPU. (CVE-2015-1779)\n\nThis issue was discovered by Daniel P. Berrange of Red Hat.\n\nAll qemu-kvm-rhev users are advised to upgrade to these updated packages,\nwhich contain a backported patch to correct this issue. After installing\nthis update, shut down all running virtual machines. Once all virtual\nmachines have shut down, start them again for this update to take effect.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2015:1931",
        "url": "https://access.redhat.com/errata/RHSA-2015:1931"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "1199572",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1199572"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1931.json"
      }
    ],
    "title": "Red Hat Security Advisory: qemu-kvm-rhev security update",
    "tracking": {
      "current_release_date": "2026-06-28T12:26:09+00:00",
      "generator": {
        "date": "2026-06-28T12:26:09+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.2.6"
        }
      },
      "id": "RHSA-2015:1931",
      "initial_release_date": "2015-10-26T21:22:29+00:00",
      "revision_history": [
        {
          "date": "2015-10-26T21:22:29+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2015-10-26T21:22:29+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-06-28T12:26:09+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "RHEV-H and VDSM for 7 Hosts",
                "product": {
                  "name": "RHEV-H and VDSM for 7 Hosts",
                  "product_id": "7Server-RHEV-Agents-7",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:7::hypervisor"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Virtualization"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.10.x86_64",
                "product": {
                  "name": "qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.10.x86_64",
                  "product_id": "qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qemu-kvm-rhev-debuginfo@2.1.2-23.el7_1.10?arch=x86_64\u0026epoch=10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "qemu-img-rhev-10:2.1.2-23.el7_1.10.x86_64",
                "product": {
                  "name": "qemu-img-rhev-10:2.1.2-23.el7_1.10.x86_64",
                  "product_id": "qemu-img-rhev-10:2.1.2-23.el7_1.10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qemu-img-rhev@2.1.2-23.el7_1.10?arch=x86_64\u0026epoch=10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libcacard-devel-rhev-10:2.1.2-23.el7_1.10.x86_64",
                "product": {
                  "name": "libcacard-devel-rhev-10:2.1.2-23.el7_1.10.x86_64",
                  "product_id": "libcacard-devel-rhev-10:2.1.2-23.el7_1.10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libcacard-devel-rhev@2.1.2-23.el7_1.10?arch=x86_64\u0026epoch=10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.10.x86_64",
                "product": {
                  "name": "qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.10.x86_64",
                  "product_id": "qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qemu-kvm-tools-rhev@2.1.2-23.el7_1.10?arch=x86_64\u0026epoch=10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libcacard-rhev-10:2.1.2-23.el7_1.10.x86_64",
                "product": {
                  "name": "libcacard-rhev-10:2.1.2-23.el7_1.10.x86_64",
                  "product_id": "libcacard-rhev-10:2.1.2-23.el7_1.10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libcacard-rhev@2.1.2-23.el7_1.10?arch=x86_64\u0026epoch=10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "qemu-kvm-common-rhev-10:2.1.2-23.el7_1.10.x86_64",
                "product": {
                  "name": "qemu-kvm-common-rhev-10:2.1.2-23.el7_1.10.x86_64",
                  "product_id": "qemu-kvm-common-rhev-10:2.1.2-23.el7_1.10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qemu-kvm-common-rhev@2.1.2-23.el7_1.10?arch=x86_64\u0026epoch=10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.10.x86_64",
                "product": {
                  "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.10.x86_64",
                  "product_id": "qemu-kvm-rhev-10:2.1.2-23.el7_1.10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qemu-kvm-rhev@2.1.2-23.el7_1.10?arch=x86_64\u0026epoch=10"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libcacard-tools-rhev-10:2.1.2-23.el7_1.10.x86_64",
                "product": {
                  "name": "libcacard-tools-rhev-10:2.1.2-23.el7_1.10.x86_64",
                  "product_id": "libcacard-tools-rhev-10:2.1.2-23.el7_1.10.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/libcacard-tools-rhev@2.1.2-23.el7_1.10?arch=x86_64\u0026epoch=10"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.10.src",
                "product": {
                  "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.10.src",
                  "product_id": "qemu-kvm-rhev-10:2.1.2-23.el7_1.10.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/qemu-kvm-rhev@2.1.2-23.el7_1.10?arch=src\u0026epoch=10"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcacard-devel-rhev-10:2.1.2-23.el7_1.10.x86_64 as a component of RHEV-H and VDSM for 7 Hosts",
          "product_id": "7Server-RHEV-Agents-7:libcacard-devel-rhev-10:2.1.2-23.el7_1.10.x86_64"
        },
        "product_reference": "libcacard-devel-rhev-10:2.1.2-23.el7_1.10.x86_64",
        "relates_to_product_reference": "7Server-RHEV-Agents-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcacard-rhev-10:2.1.2-23.el7_1.10.x86_64 as a component of RHEV-H and VDSM for 7 Hosts",
          "product_id": "7Server-RHEV-Agents-7:libcacard-rhev-10:2.1.2-23.el7_1.10.x86_64"
        },
        "product_reference": "libcacard-rhev-10:2.1.2-23.el7_1.10.x86_64",
        "relates_to_product_reference": "7Server-RHEV-Agents-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libcacard-tools-rhev-10:2.1.2-23.el7_1.10.x86_64 as a component of RHEV-H and VDSM for 7 Hosts",
          "product_id": "7Server-RHEV-Agents-7:libcacard-tools-rhev-10:2.1.2-23.el7_1.10.x86_64"
        },
        "product_reference": "libcacard-tools-rhev-10:2.1.2-23.el7_1.10.x86_64",
        "relates_to_product_reference": "7Server-RHEV-Agents-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-img-rhev-10:2.1.2-23.el7_1.10.x86_64 as a component of RHEV-H and VDSM for 7 Hosts",
          "product_id": "7Server-RHEV-Agents-7:qemu-img-rhev-10:2.1.2-23.el7_1.10.x86_64"
        },
        "product_reference": "qemu-img-rhev-10:2.1.2-23.el7_1.10.x86_64",
        "relates_to_product_reference": "7Server-RHEV-Agents-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-common-rhev-10:2.1.2-23.el7_1.10.x86_64 as a component of RHEV-H and VDSM for 7 Hosts",
          "product_id": "7Server-RHEV-Agents-7:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.10.x86_64"
        },
        "product_reference": "qemu-kvm-common-rhev-10:2.1.2-23.el7_1.10.x86_64",
        "relates_to_product_reference": "7Server-RHEV-Agents-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.10.src as a component of RHEV-H and VDSM for 7 Hosts",
          "product_id": "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.10.src"
        },
        "product_reference": "qemu-kvm-rhev-10:2.1.2-23.el7_1.10.src",
        "relates_to_product_reference": "7Server-RHEV-Agents-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-rhev-10:2.1.2-23.el7_1.10.x86_64 as a component of RHEV-H and VDSM for 7 Hosts",
          "product_id": "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.10.x86_64"
        },
        "product_reference": "qemu-kvm-rhev-10:2.1.2-23.el7_1.10.x86_64",
        "relates_to_product_reference": "7Server-RHEV-Agents-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.10.x86_64 as a component of RHEV-H and VDSM for 7 Hosts",
          "product_id": "7Server-RHEV-Agents-7:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.10.x86_64"
        },
        "product_reference": "qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.10.x86_64",
        "relates_to_product_reference": "7Server-RHEV-Agents-7"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.10.x86_64 as a component of RHEV-H and VDSM for 7 Hosts",
          "product_id": "7Server-RHEV-Agents-7:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.10.x86_64"
        },
        "product_reference": "qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.10.x86_64",
        "relates_to_product_reference": "7Server-RHEV-Agents-7"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Daniel P. Berrange"
          ],
          "organization": "Red Hat",
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2015-1779",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2015-03-04T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "1199572"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It was found that the QEMU\u0027s websocket frame decoder processed incoming frames without limiting resources used to process the header and the payload. An attacker able to access a guest\u0027s VNC console could use this flaw to trigger a denial of service on the host by exhausting all available memory and CPU.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "qemu: vnc: insufficient resource limiting in VNC websockets decoder",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This issue did not affect the kvm and qemu-kvm packages as shipped with Red Hat Enterprise Linux 5 and 6.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "7Server-RHEV-Agents-7:libcacard-devel-rhev-10:2.1.2-23.el7_1.10.x86_64",
          "7Server-RHEV-Agents-7:libcacard-rhev-10:2.1.2-23.el7_1.10.x86_64",
          "7Server-RHEV-Agents-7:libcacard-tools-rhev-10:2.1.2-23.el7_1.10.x86_64",
          "7Server-RHEV-Agents-7:qemu-img-rhev-10:2.1.2-23.el7_1.10.x86_64",
          "7Server-RHEV-Agents-7:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.10.x86_64",
          "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.10.src",
          "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.10.x86_64",
          "7Server-RHEV-Agents-7:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.10.x86_64",
          "7Server-RHEV-Agents-7:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.10.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2015-1779"
        },
        {
          "category": "external",
          "summary": "RHBZ#1199572",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1199572"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2015-1779",
          "url": "https://www.cve.org/CVERecord?id=CVE-2015-1779"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-1779",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-1779"
        }
      ],
      "release_date": "2015-03-23T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2015-10-26T21:22:29+00:00",
          "details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "7Server-RHEV-Agents-7:libcacard-devel-rhev-10:2.1.2-23.el7_1.10.x86_64",
            "7Server-RHEV-Agents-7:libcacard-rhev-10:2.1.2-23.el7_1.10.x86_64",
            "7Server-RHEV-Agents-7:libcacard-tools-rhev-10:2.1.2-23.el7_1.10.x86_64",
            "7Server-RHEV-Agents-7:qemu-img-rhev-10:2.1.2-23.el7_1.10.x86_64",
            "7Server-RHEV-Agents-7:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.10.x86_64",
            "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.10.src",
            "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.10.x86_64",
            "7Server-RHEV-Agents-7:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.10.x86_64",
            "7Server-RHEV-Agents-7:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.10.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2015:1931"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "ADJACENT_NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 5.7,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:A/AC:M/Au:N/C:N/I:N/A:C",
            "version": "2.0"
          },
          "products": [
            "7Server-RHEV-Agents-7:libcacard-devel-rhev-10:2.1.2-23.el7_1.10.x86_64",
            "7Server-RHEV-Agents-7:libcacard-rhev-10:2.1.2-23.el7_1.10.x86_64",
            "7Server-RHEV-Agents-7:libcacard-tools-rhev-10:2.1.2-23.el7_1.10.x86_64",
            "7Server-RHEV-Agents-7:qemu-img-rhev-10:2.1.2-23.el7_1.10.x86_64",
            "7Server-RHEV-Agents-7:qemu-kvm-common-rhev-10:2.1.2-23.el7_1.10.x86_64",
            "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.10.src",
            "7Server-RHEV-Agents-7:qemu-kvm-rhev-10:2.1.2-23.el7_1.10.x86_64",
            "7Server-RHEV-Agents-7:qemu-kvm-rhev-debuginfo-10:2.1.2-23.el7_1.10.x86_64",
            "7Server-RHEV-Agents-7:qemu-kvm-tools-rhev-10:2.1.2-23.el7_1.10.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "qemu: vnc: insufficient resource limiting in VNC websockets decoder"
    }
  ]
}

BDU:2016-00128 (CVE-2015-1779)

Vulnerability from fstec – Published: 2016-01-22 – Updated: 2021-03-23 – View on bdu.fstec.ru Fixed

Title

Уязвимость эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании

Summary

Уязвимость компонента VNC websocket frame decoder эмулятора аппаратного обеспечения QEMU связана с ошибками управления ресурсом. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании (расход памяти и вычислительных ресурсов) путем передачи HTTP-заголовка или данных слишком большого размера

Severity

7.8 (High) CVSS 2.0


                      
                        AV:N/AC:L/Au:N/C:N/I:N/A:C

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Being clarified

Incidents

Being clarified

Remediation

Being clarified

CWE

CWE-399 - Ошибки управления ресурсом

Aliases

CVE-2015-1779, USN-2608-1, FEDORA-2015-5482, FEDORA-2015-5541, DSA-3259, RHSA-2015:1931, RHSA-2015:1943, SUSE-SA:SU-2015:0870, SUSE-SA:SU-2015:0896, SECURITY, TRACKER, ID:1033975, BID, ID:73303

References

15 references

URL
https://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04896.html
https://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04895.html
https://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04894.html
http://www.ubuntu.com/usn/USN-2608-1
http://www.securitytracker.com/id/1033975
http://www.securityfocus.com/bid/73303
http://www.openwall.com/lists/oss-security/2015/04/09/6
http://www.openwall.com/lists/oss-security/2015/03/24/9
http://www.debian.org/security/2015/dsa-3259
http://rhn.redhat.com/errata/RHSA-2015-1943.html
http://rhn.redhat.com/errata/RHSA-2015-1931.html
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00042.html
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00033.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155196.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154656.html

Impacted products

7 products from 7 vendors

Vendors

Canonical Ltd., Сообщество свободного программного обеспечения, Fedora Project, Red Hat, Inc., Novell Inc., QEMU Project

Products

Ubuntu, Debian GNU/Linux, Fedora, Red Hat Enterprise Linux, SUSE Linux Enterprise, Suse Linux Enterprise Desktop, QEMU

Versions

14.10 (Ubuntu), 14.04 LTS (Ubuntu), 12.04 LTS (Ubuntu), 15.04 (Ubuntu), 7 (Debian GNU/Linux), 21 (Fedora), 22 (Fedora), 7.0 (Red Hat Enterprise Linux), 11.0 SP3 (SUSE Linux Enterprise), 12.0 (SUSE Linux Enterprise), 11.0 SP3 (Suse Linux Enterprise Desktop), . (Suse Linux Enterprise Desktop), 12.0 (Suse Linux Enterprise Desktop), - (QEMU)

Product types

Operating system, Virtualization software

Platforms

Сообщество свободного программного обеспечения Linux . 64-bit, Сообщество свободного программного обеспечения Linux . 32-bit, Apple Inc. MacOS 10 32-bit, Microsoft Corp Windows - 64-bit, Microsoft Corp Windows - 32-bit, Сообщество свободного программного обеспечения Unix . 64-bit, Сообщество свободного программного обеспечения Unix . 32-bit, Apple Inc. MacOS 10 64-bit

Mitigations

Использование рекомендаций производителя: http://rhn.redhat.com/errata/RHSA-2015-1943.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1931.html

Credits

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
  "CVSS 3.0": null,
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Canonical Ltd., \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, Fedora Project, Red Hat, Inc., Novell Inc., QEMU Project",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "14.10 (Ubuntu), 14.04 LTS (Ubuntu), 12.04 LTS (Ubuntu), 15.04 (Ubuntu), 7 (Debian GNU/Linux), 21 (Fedora), 22 (Fedora), 7.0 (Red Hat Enterprise Linux), 11.0 SP3 (SUSE Linux Enterprise), 12.0 (SUSE Linux Enterprise), 11.0 SP3 (Suse Linux Enterprise Desktop), . (Suse Linux Enterprise Desktop), 12.0 (Suse Linux Enterprise Desktop), - (QEMU)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttp://rhn.redhat.com/errata/RHSA-2015-1943.htmlhttp://rhn.redhat.com/errata/RHSA-2015-1931.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "12.01.2016",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.03.2021",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "22.01.2016",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2016-00128",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2015-1779, USN-2608-1, FEDORA-2015-5482, FEDORA-2015-5541, DSA-3259, RHSA-2015:1931, RHSA-2015:1943, SUSE-SA:SU-2015:0870, SUSE-SA:SU-2015:0896, Security Tracker ID:1033975, BID ID:73303",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Ubuntu, Debian GNU/Linux, Fedora, Red Hat Enterprise Linux, SUSE Linux Enterprise, Suse Linux Enterprise Desktop, QEMU",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux . 64-bit, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Linux . 32-bit, Apple Inc. MacOS 10 32-bit, Microsoft Corp Windows - 64-bit, Microsoft Corp Windows - 32-bit, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Unix . 64-bit, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Unix . 32-bit, Apple Inc. MacOS 10 64-bit",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f QEMU, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0448\u0438\u0431\u043a\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u043c (CWE-399)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 VNC websocket frame decoder \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f QEMU \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u043c. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (\u0440\u0430\u0441\u0445\u043e\u0434 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438 \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432) \u043f\u0443\u0442\u0435\u043c \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 \u0438\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u0440\u0430\u0437\u043c\u0435\u0440\u0430",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": "-",
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04896.html\nhttps://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04895.html\nhttps://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04894.html\nhttp://www.ubuntu.com/usn/USN-2608-1\nhttp://www.securitytracker.com/id/1033975\nhttp://www.securityfocus.com/bid/73303\nhttp://www.openwall.com/lists/oss-security/2015/04/09/6\nhttp://www.openwall.com/lists/oss-security/2015/03/24/9\nhttp://www.debian.org/security/2015/dsa-3259\nhttp://rhn.redhat.com/errata/RHSA-2015-1943.html\nhttp://rhn.redhat.com/errata/RHSA-2015-1931.html\nhttp://lists.opensuse.org/opensuse-security-announce/2015-05/msg00042.html\nhttp://lists.opensuse.org/opensuse-security-announce/2015-05/msg00033.html\nhttp://lists.fedoraproject.org/pipermail/package-announce/2015-April/155196.html\nhttp://lists.fedoraproject.org/pipermail/package-announce/2015-April/154656.html",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438/\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-399",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)"
}

CVE-2015-1779 (GCVE-0-2015-1779)

Vulnerability from cvelistv5 – Published: 2016-01-12 19:00 – Updated: 2024-08-06 04:54

Summary

The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.

Severity

No CVSS data available.

CWE

Assigner

redhat CNA under the redhat root

CNA scorecard B 81/100 over 1014 records in the last 180 days details

References

17 references

URL	Tags
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
https://lists.gnu.org/archive/html/qemu-devel/201…	mailing-listx_refsource_MLIST
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
http://www.debian.org/security/2015/dsa-3259	vendor-advisoryx_refsource_DEBIAN
http://www.openwall.com/lists/oss-security/2015/04/09/6	mailing-listx_refsource_MLIST
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE
http://lists.fedoraproject.org/pipermail/package-…	vendor-advisoryx_refsource_FEDORA
https://lists.gnu.org/archive/html/qemu-devel/201…	mailing-listx_refsource_MLIST
http://rhn.redhat.com/errata/RHSA-2015-1931.html	vendor-advisoryx_refsource_REDHAT
http://www.openwall.com/lists/oss-security/2015/03/24/9	mailing-listx_refsource_MLIST
http://www.securitytracker.com/id/1033975	vdb-entryx_refsource_SECTRACK
http://www.oracle.com/technetwork/topics/security…	x_refsource_CONFIRM
http://rhn.redhat.com/errata/RHSA-2015-1943.html	vendor-advisoryx_refsource_REDHAT
http://www.ubuntu.com/usn/USN-2608-1	vendor-advisoryx_refsource_UBUNTU
https://lists.gnu.org/archive/html/qemu-devel/201…	mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/73303	vdb-entryx_refsource_BID
https://security.gentoo.org/glsa/201602-01	vendor-advisoryx_refsource_GENTOO

Date Public

2015-03-23 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T04:54:15.943Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "SUSE-SU-2015:0870",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00033.html"
          },
          {
            "name": "[Qemu-devel] 20150323 [PATCH 1/2] CVE-2015-1779: incrementally decode websocket frames",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04896.html"
          },
          {
            "name": "FEDORA-2015-5541",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155196.html"
          },
          {
            "name": "DSA-3259",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2015/dsa-3259"
          },
          {
            "name": "[oss-security] 20150409 Re: CVE-2015-1779 qemu: vnc: insufficient resource limiting in VNC websockets decoder",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/04/09/6"
          },
          {
            "name": "SUSE-SU-2015:0896",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00042.html"
          },
          {
            "name": "FEDORA-2015-5482",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154656.html"
          },
          {
            "name": "[Qemu-devel] 20150323 [PATCH 0/2] CVE-2015-1779: fix denial of service in VNC websockets",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04894.html"
          },
          {
            "name": "RHSA-2015:1931",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1931.html"
          },
          {
            "name": "[oss-security] 20150324 CVE-2015-1779 qemu: vnc: insufficient resource limiting in VNC websockets decoder",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/03/24/9"
          },
          {
            "name": "1033975",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1033975"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
          },
          {
            "name": "RHSA-2015:1943",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-1943.html"
          },
          {
            "name": "USN-2608-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-2608-1"
          },
          {
            "name": "[Qemu-devel] 20150323 [PATCH 2/2] CVE-2015-1779: limit size of HTTP headers from websockets clients",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04895.html"
          },
          {
            "name": "73303",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/73303"
          },
          {
            "name": "GLSA-201602-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201602-01"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-03-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "SUSE-SU-2015:0870",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00033.html"
        },
        {
          "name": "[Qemu-devel] 20150323 [PATCH 1/2] CVE-2015-1779: incrementally decode websocket frames",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04896.html"
        },
        {
          "name": "FEDORA-2015-5541",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155196.html"
        },
        {
          "name": "DSA-3259",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2015/dsa-3259"
        },
        {
          "name": "[oss-security] 20150409 Re: CVE-2015-1779 qemu: vnc: insufficient resource limiting in VNC websockets decoder",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/04/09/6"
        },
        {
          "name": "SUSE-SU-2015:0896",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00042.html"
        },
        {
          "name": "FEDORA-2015-5482",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154656.html"
        },
        {
          "name": "[Qemu-devel] 20150323 [PATCH 0/2] CVE-2015-1779: fix denial of service in VNC websockets",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04894.html"
        },
        {
          "name": "RHSA-2015:1931",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1931.html"
        },
        {
          "name": "[oss-security] 20150324 CVE-2015-1779 qemu: vnc: insufficient resource limiting in VNC websockets decoder",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/03/24/9"
        },
        {
          "name": "1033975",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1033975"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html"
        },
        {
          "name": "RHSA-2015:1943",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-1943.html"
        },
        {
          "name": "USN-2608-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-2608-1"
        },
        {
          "name": "[Qemu-devel] 20150323 [PATCH 2/2] CVE-2015-1779: limit size of HTTP headers from websockets clients",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2015-03/msg04895.html"
        },
        {
          "name": "73303",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/73303"
        },
        {
          "name": "GLSA-201602-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201602-01"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2015-1779",
    "datePublished": "2016-01-12T19:00:00.000Z",
    "dateReserved": "2015-02-17T00:00:00.000Z",
    "dateUpdated": "2024-08-06T04:54:15.943Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2015:1931

BDU:2016-00128 (CVE-2015-1779)

CVE-2015-1779 (GCVE-0-2015-1779)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour