CVE-2023-6683

A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The qemu_clipboard_request() function can be reached before vnc_server_cut_text_caps() was called and had the chance to initialize the clipboard peer, leading to a NULL pointer dereference. This could allow a malicious authenticated VNC client to crash QEMU and trigger a denial of service.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - secalert@redhat.com

Published

2024-01-12

Last modified

2026-02-25

Weaknesses

CWE-476

Affected products

• Qemu (Qemu)
• Advanced Virtualization (Redhat)
• Enterprise Linux (Redhat)

References

• https://access.redhat.com/errata/RHSA-2024:2135
• https://access.redhat.com/errata/RHSA-2024:2962
• https://access.redhat.com/security/cve/CVE-2023-6683
• https://bugzilla.redhat.com/show_bug.cgi?id=2254825
• https://security.netapp.com/advisory/ntap-20240223-0001/