summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSalvatore Bonaccorso <carnil@debian.org>2022-09-27 08:27:21 +0200
committerSalvatore Bonaccorso <carnil@debian.org>2022-09-27 08:27:21 +0200
commitb000276d9124c78fc2b69ce1ce9a8bc98f51fe8c (patch)
tree23633516f52924373b92b14cd8a8235d7911ae0b
parentdf1fb580d69887e4b54679296159f0a57131a1a8 (diff)
Add CVE-2022-3165/qemu
-rw-r--r--data/CVE/list8
1 files changed, 7 insertions, 1 deletions
diff --git a/data/CVE/list b/data/CVE/list
index e67bc148ea..085defad54 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -3223,8 +3223,14 @@ CVE-2022-3167 (Improper Restriction of Rendered UI Layers or Frames in GitHub re
- rdiffweb <itp> (bug #969974)
CVE-2022-3166
RESERVED
-CVE-2022-3165
+CVE-2022-3165 [VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion]
RESERVED
+ - qemu <unfixed>
+ [bullseye] - qemu <not-affected> (Vulnerable code introduced later)
+ [buster] - qemu <not-affected> (Vulnerable code introduced later)
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=2129739
+ NOTE: Introduced by: https://gitlab.com/qemu-project/qemu/-/commit/0bf41cab93e5c72dcda717abd625698b59d9ba3e (v6.1.0-rc0)
+ NOTE: Proposed fix: https://lists.nongnu.org/archive/html/qemu-devel/2022-09/msg03948.html
CVE-2022-3164
RESERVED
CVE-2022-3163

© 2014-2022 Faster IT GmbH | imprint | privacy policy