Logo
›
›vulnerability›CVE-2023-6683
Name
CVE-2023-6683
Source
NVD ( link)Debian ( link)
Description
A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The qemu_clipboard_request() function can be reached before vnc_server_cut_text_caps() was called and had the chance to initialize the clipboard peer, leading to a NULL pointer dereference. This could allow a malicious authenticated VNC client to crash QEMU and trigger a denial of service.
CWEs
CWE-476 CWE-476
Published Date
Updated Date
Workaround
-
Advisories
https://access.redhat.com/errata/RHSA-2024:2135Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:2962Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-6683Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2254825Issue Tracking
https://access.redhat.com/errata/RHSA-2024:2135Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:2962Third Party Advisory
https://access.redhat.com/security/cve/CVE-2023-6683Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2254825Issue Tracking
https://security.netapp.com/advisory/ntap-20240223-0001/Third Party Advisory

Analysis#

Affected Component
Analysis
qemu
Patched

Vulnerability Ratings#

6.5
CVSSv31
6.5
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
qemu
buildroot
2025.02.x
9.2.0
Not Affected
qemu
buildroot
master
11.0.0
Not Affected
qemu
openwrt
master
10.1.3-r2
Not Affected
qemu
openwrt
openwrt-25.12
10.1.2-r1
Not Affected
qemu
yocto
master
11.0.1
Not Affected
qemu
yocto
scarthgap
8.2.7
Not Affected

Resolved with patches#

qemu (yocto:kirkstone)

#
Title
Author
Resolve
1
ui/clipboard: mark type as not available when there is no
Fiona Ebner <f.ebner@proxmox.com>
CVE-2023-6683