PT-2022-7294 · Qemu+10 · Qemu+10

Tangpeng · Published 2022-09-25 · Updated 2024-03-29 · CVE-2022-3165

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description The issue is related to an integer underflow in the QEMU VNC server when processing ClientCutText messages in the extended format. This can be exploited by a malicious client sending a specially crafted payload message, resulting in a denial of service, making QEMU unresponsive. The exploitation can be done remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

ALSA-2023:2162

ALSA-2023:2757

ALT-PU-2022-3429

ALT-PU-2023-1830

ALT-PU-2023-1869

AZL-11222

AZL-35160

BDU:2024-02427

CESA-2023_2757

CVE-2022-3165

MGASA-2023-0059

OESA-2022-2024

RHSA-2023:2162

RHSA-2023:2757

RHSA-2023_2162

RHSA-2023_2757

SUSE-SU-2023:0671-1

USN-5772-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Linuxmint

Qemu

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 74

• 🔥 https://github.com/QiuhaoLi/CVE-2021-3929-3947 · Exploit
• https://cve.org/CVERecord?id=CVE-2022-3165 · Security Note
• https://linux.oracle.com/errata/ELSA-2023-12065.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-3165 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0671-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02427 · Security Note
• https://gitlab.com/qemu-project/qemu/-/commit/d307040b18 · Patch
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I36LKZA7Z65J3LJU2P37LVTWDFTXBMPU · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3165 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTY7TVHX62OJWF6IOBCIGLR2N5K4QN3E · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-12195.html · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5772-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-35160 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-11222 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3682 · Vendor Advisory