| Package | Affected versions | Patched versions |
|---|---|---|
| qemu | = 2.3.0≤ 2.2.1 | |
| virtualization | = 3.0 |
The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free