CVE-2023-6683 Qemu: vnc: null pointer dereference in qemu_clipboard_request()
A malicious authenticated VNC client can crash QEMU via a null pointer dereference in the clipboard request handler, causing denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-6683?
CVE-2023-6683 is a medium-severity vulnerability in Qemu Qemu, published on 12 Jan 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. The qemu_clipboard_request() function can be reached before vnc_server_cut_text_caps() was called and had the chance to initialize the clipboard peer, leading to a NULL pointer dereference. This could allow a malicious authenticated VNC client to crash QEMU and trigger a denial of service.
Weakness: CWE-476
Which versions are affected by CVE-2023-6683?
It affects 2 products.
Products include Qemu Qemu, Redhat Enterprise Linux.
How do I fix CVE-2023-6683?
Apply the vendor's patch.
Is CVE-2023-6683 being exploited?
There is no known exploitation of CVE-2023-6683 in the wild and no public exploit code.
Other vulnerabilities in Qemu Qemu
Sources
Also known as AZL-40048, AZL-43054, BELL-CVE-2023-6683, DEBIAN-CVE-2023-6683, GHSA-x9c6-9g9w-hg73, UBUNTU-CVE-2023-6683.