A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The qemu_clipboard_request() function can be reached before vnc_server_cut_text_caps() was called and had the chance to initialize the clipboard peer, leading to a NULL pointer dereference. This could allow a malicious authenticated VNC client to crash QEMU and trigger a denial of service.
CVSS
No CVSS.
References
Configurations
No configuration.
Information
Published : 2024-01-12 19:15
Updated : 2024-01-12 19:21
NVD link : CVE-2023-6683
Mitre link : CVE-2023-6683
JSON object : View
Products Affected
No product.
CWE
No CWE.
