CVE-2022-3165

An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could use this flaw to make QEMU unresponsive by sending a specially crafted payload message, resulting in a denial of service.

• CWE-191

• https://gitlab.com/qemu-project/qemu/-/commit/d307040b18Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I36LKZA7Z65J3LJU2P37LVTWDFTXBMPU/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTY7TVHX62OJWF6IOBCIGLR2N5K4QN3E/
• https://security.netapp.com/advisory/ntap-20221223-0006/Third Party Advisory
• https://gitlab.com/qemu-project/qemu/-/commit/d307040b18Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I36LKZA7Z65J3LJU2P37LVTWDFTXBMPU/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTY7TVHX62OJWF6IOBCIGLR2N5K4QN3E/
• https://security.netapp.com/advisory/ntap-20221223-0006/Third Party Advisory

Published

Oct 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-31644Potential vulnerabilities have been identified in the system…7.8
• CVE-2022-31645Potential vulnerabilities have been identified in the system…7.8
• CVE-2022-31646Potential vulnerabilities have been identified in the system…7.8
• CVE-2022-31647Docker Desktop before 4.6.0 on Windows allows attackers to d…7.1
• CVE-2022-31648Talend Administration Center is vulnerable to a reflected Cr…6.1
• CVE-2022-31649ownCloud owncloud/core before 10.10.0 Improperly Removes Sen…7.5
• CVE-2022-31650In SoX 14.4.2, there is a floating-point exception in lsx_ai…5.5
• CVE-2022-31651In SoX 14.4.2, there is an assertion failure in rate_init in…5.5
• CVE-2022-31654VMware vRealize Log Insight in versions prior to 8.8.2 conta…5.4
• CVE-2022-31655VMware vRealize Log Insight in versions prior to 8.8.2 conta…5.4
• CVE-2022-31656VMware Workspace ONE Access, Identity Manager and vRealize A…9.8
• CVE-2022-31657VMware Workspace ONE Access and Identity Manager contain a U…9.8