CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2023-3255
Severity
MEDIUM
CVSS
6.5
EPSS
1.89%
Original NVD Description
A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an attacker controlled zlib buffer in the `inflate_buffer` function. This could allow a remote authenticated client who is able to send a clipboard to the VNC server to trigger a denial of service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)