CVE-2023-6683

A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The qemu_clipboard_request() function can be reached before vnc_server_cut_text_caps() was called and had the chance to initialize the clipboard peer, leading to a NULL pointer dereference. This could allow a malicious authenticated VNC client to crash QEMU and trigger a denial of service.
CVSS

No CVSS.

Configurations

No configuration.

Information

Published : 2024-01-12 19:15

Updated : 2024-01-12 19:21


NVD link : CVE-2023-6683

Mitre link : CVE-2023-6683


JSON object : View

Products Affected

No product.

CWE

No CWE.