CVE-2023-3354
Last modified
CVE-2023-3354 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. EPSS estimates a 1.34% chance of exploitation in the next 30 days.
Description
A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Qemu | Qemu | < 8.1.0 | — |
| Qemu | Qemu | 8.1.0 | Rc0 |
| Redhat | Openstack Platform | 13.0 | — |
| Redhat | Enterprise Linux | 7.0 | — |
| Redhat | Enterprise Linux | 8.0 | — |
| Redhat | Enterprise Linux | 9.0 | — |
| Fedoraproject | Fedora | 38 | — |
References
- https://access.redhat.com/security/cve/CVE-2023-3354Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2216478Issue Tracking, Patch
- https://access.redhat.com/security/cve/CVE-2023-3354Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2216478Issue Tracking, Patch
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-3354?
How severe is CVE-2023-3354?
How do I fix CVE-2023-3354?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-33532There is a command injection vulnerability in the Netgear R6…9.8
- CVE-2023-33533Netgear D6220 with Firmware Version 1.0.0.80, D8500 with Fir…8.8
- CVE-2023-33534A Cross-Site Request Forgery (CSRF) in Guanzhou Tozed Kangwe…8.8
- CVE-2023-33536TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/…8.1
- CVE-2023-33537TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/…8.1
- CVE-2023-33538TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/…8.8
- CVE-2023-33544hawtio 2.17.2 is vulnerable to Path Traversal. it is possibl…5.5
- CVE-2023-33546Janino 3.1.9 and earlier are subject to denial of service (D…5.5
- CVE-2023-33548Cross Site Scripting (XSS) vulnerability in ASUS RT-AC51U wi…6.8
- CVE-2023-3355A NULL pointer dereference flaw was found in the Linux kerne…5.5
- CVE-2023-33551Heap Buffer Overflow in the erofsfsck_dirent_iter function i…7.8
- CVE-2023-33552Heap Buffer Overflow in the erofs_read_one_data function at …7.8
Are you affected by CVE-2023-3354?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST