CoreCVE
Back

HIGH

Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of service

Published Jul 11, 2023

Description

A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a certain threshold and if so, cleans up the previous connection. If the previous connection happens to be in the handshake phase and fails, QEMU cleans up the connection again, resulting in a NULL pointer dereference issue. This could allow a remote unauthenticated client to cause a denial of service.

Affected products

Remediation

Red Hat statement

The versions of `qemu-kvm` as shipped with Red Hat Enterprise Linux 6 and 7 are not affected by this flaw as they did not include the QIOChannel framework (introduced upstream in QEMU 2.10).

Metrics

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (6)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Jul 11, 2023
Updated Feb 13, 2025
Reserved Jun 21, 2023
Link CVE-2023-3354
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2023-3354
Red Hat
Severity Important
Public date Jun 28, 2023
Links CVE-2023-3354 - Bugzilla