Logo
›
›vulnerability›CVE-2022-3165
Name
CVE-2022-3165
Source
NVD ( link)Debian ( link)
Description
An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially crafted payload message, resulting in a denial of service.
CWEs
CWE-191
Published Date
Updated Date
Workaround
-
Advisories
https://gitlab.com/qemu-project/qemu/-/commit/d307040b18Patch
https://security.netapp.com/advisory/ntap-20221223-0006/Third Party Advisory
https://gitlab.com/qemu-project/qemu/-/commit/d307040b18Patch
https://security.netapp.com/advisory/ntap-20221223-0006/Third Party Advisory

Analysis#

Affected Component
Analysis
qemu
Patched

Vulnerability Ratings#

6.5
CVSSv31
6.5
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
qemu
buildroot
2025.02.x
9.2.0
Not Affected
qemu
buildroot
master
11.0.0
Not Affected
qemu
openwrt
master
10.1.3-r2
Not Affected
qemu
openwrt
openwrt-25.12
10.1.2-r1
Not Affected
qemu
yocto
master
11.0.1
Not Affected
qemu
yocto
scarthgap
8.2.7
Not Affected

Resolved with patches#

qemu (yocto:kirkstone)

#
Title
Author
Resolve
1
CVE-2022-3165
Hitendra Prajapati <hprajapati@mvista.com>
CVE-2022-3165