An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially crafted payload message, resulting in a denial of service.
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Qemu | Qemu | 6.1.0 (including) | 7.1.0 (including) |
| Red Hat Enterprise Linux 8 | RedHat | virt-devel:rhel-8080020230410211546.fd72936b | * |
| Red Hat Enterprise Linux 8 | RedHat | virt:rhel-8080020230410211546.fd72936b | * |
| Red Hat Enterprise Linux 9 | RedHat | qemu-kvm-17:7.2.0-14.el9_2 | * |
| Qemu | Ubuntu | devel | * |
| Qemu | Ubuntu | jammy | * |
| Qemu | Ubuntu | kinetic | * |
| Qemu | Ubuntu | trusty | * |
| Qemu | Ubuntu | xenial | * |