Nixpkgs Security Tracker

Login with GitHub

Suggestion detail

Untriaged

Permalink CVE-2015-5239

created 1 month ago

Integer overflow in the VNC display driver in QEMU before …

Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.

References

http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html x_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.h… x_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.h… x_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.h… x_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html x_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html x_refsource_MISC
http://www.ubuntu.com/usn/USN-2745-1 x_refsource_MISC
http://www.openwall.com/lists/oss-security/2015/09/02/7 x_refsource_MISC
https://github.com/qemu/qemu/commit/f9a70e79391f6d7c2a912d785239ee8effc1922d x_refsource_CONFIRM
https://www.arista.com/en/support/advisories-notices/security-advisories/1188-s… x_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html x_refsource_MISC x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.h… x_refsource_MISC x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.h… x_refsource_MISC x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.h… x_refsource_MISC x_transferred
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html x_refsource_MISC x_transferred
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html x_refsource_MISC x_transferred
http://www.ubuntu.com/usn/USN-2745-1 x_refsource_MISC x_transferred
http://www.openwall.com/lists/oss-security/2015/09/02/7 x_refsource_MISC x_transferred
https://github.com/qemu/qemu/commit/f9a70e79391f6d7c2a912d785239ee8effc1922d x_refsource_CONFIRM x_transferred
https://www.arista.com/en/support/advisories-notices/security-advisories/1188-s… x_refsource_MISC x_transferred
http://www.openwall.com/lists/oss-security/2015/09/02/7 x_refsource_MISC
https://github.com/qemu/qemu/commit/f9a70e79391f6d7c2a912d785239ee8effc1922d x_refsource_CONFIRM
https://www.arista.com/en/support/advisories-notices/security-advisories/1188-s… x_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html x_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.h… x_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.h… x_refsource_MISC
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.h… x_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html x_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html x_refsource_MISC
http://www.ubuntu.com/usn/USN-2745-1 x_refsource_MISC
http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00026.html x_refsource_MISC x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168671.h… x_refsource_MISC x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168077.h… x_refsource_MISC x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168646.h… x_refsource_MISC x_transferred
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html x_refsource_MISC x_transferred
http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00011.html x_refsource_MISC x_transferred
http://www.ubuntu.com/usn/USN-2745-1 x_refsource_MISC x_transferred
http://www.openwall.com/lists/oss-security/2015/09/02/7 x_refsource_MISC x_transferred
https://github.com/qemu/qemu/commit/f9a70e79391f6d7c2a912d785239ee8effc1922d x_refsource_CONFIRM x_transferred
https://www.arista.com/en/support/advisories-notices/security-advisories/1188-s… x_refsource_MISC x_transferred

Affected products

QEMU

==before 2.1.0

Matching in nixpkgs

pkgs.qemu

Generic and open source machine emulator and virtualizer

nixos-unstable 10.2.0
- nixpkgs-unstable 10.2.0
- nixos-unstable-small 10.2.1
nixos-25.11 10.1.2
- nixos-25.11-small 10.1.2
- nixpkgs-25.11-darwin 10.1.2

pkgs.qemu_kvm

Generic and open source machine emulator and virtualizer

nixos-unstable 10.2.0
- nixpkgs-unstable 10.2.0
- nixos-unstable-small 10.2.1
nixos-25.11 10.1.2
- nixos-25.11-small 10.1.2
- nixpkgs-25.11-darwin 10.1.2

pkgs.qemu_xen

Generic and open source machine emulator and virtualizer

nixos-unstable 10.2.0
- nixpkgs-unstable 10.2.0
- nixos-unstable-small 10.2.1
nixos-25.11 10.1.2
- nixos-25.11-small 10.1.2
- nixpkgs-25.11-darwin 10.1.2

pkgs.qemu-user

QEMU User space emulator - launch executables compiled for one CPU on another CPU

nixos-unstable 10.2.0
- nixpkgs-unstable 10.2.0
- nixos-unstable-small 10.2.1
nixos-25.11 10.1.2
- nixos-25.11-small 10.1.2
- nixpkgs-25.11-darwin 10.1.2

pkgs.qemu_full

Generic and open source machine emulator and virtualizer

nixos-unstable 10.2.0
- nixpkgs-unstable 10.2.0
- nixos-unstable-small 10.2.1
nixos-25.11 10.1.2
- nixos-25.11-small 10.1.2
- nixpkgs-25.11-darwin 10.1.2

pkgs.qemu_test

Generic and open source machine emulator and virtualizer

nixos-unstable 10.2.0
- nixpkgs-unstable 10.2.0
- nixos-unstable-small 10.2.1
nixos-25.11 10.1.2
- nixos-25.11-small 10.1.2
- nixpkgs-25.11-darwin 10.1.2

pkgs.qemu-utils

Generic and open source machine emulator and virtualizer

nixos-unstable 10.2.0
- nixpkgs-unstable 10.2.0
- nixos-unstable-small 10.2.1
nixos-25.11 10.1.2
- nixos-25.11-small 10.1.2
- nixpkgs-25.11-darwin 10.1.2

pkgs.canokey-qemu

CanoKey QEMU Virt Card

pkgs.ubootQemuX86

Boot loader for embedded systems

nixos-unstable x86_defconfig-2025.10
- nixpkgs-unstable x86_defconfig-2025.10
- nixos-unstable-small x86_defconfig-2025.10
nixos-25.11 x86_defconfig-2025.10
- nixos-25.11-small x86_defconfig-2025.10
- nixpkgs-25.11-darwin x86_defconfig-2025.10

pkgs.ubootQemuX86_64

Boot loader for embedded systems

nixos-unstable x86_64_defconfig-2025.10
- nixpkgs-unstable x86_64_defconfig-2025.10
- nixos-unstable-small x86_64_defconfig-2025.10
nixos-25.11 x86_64_defconfig-2025.10
- nixos-25.11-small x86_64_defconfig-2025.10
- nixpkgs-25.11-darwin x86_64_defconfig-2025.10

pkgs.ubootQemuAarch64

Boot loader for embedded systems

nixos-unstable qemu_arm64_defconfig-2025.10
- nixpkgs-unstable qemu_arm64_defconfig-2025.10
- nixos-unstable-small qemu_arm64_defconfig-2025.10
nixos-25.11 qemu_arm64_defconfig-2025.10
- nixos-25.11-small qemu_arm64_defconfig-2025.10
- nixpkgs-25.11-darwin qemu_arm64_defconfig-2025.10

pkgs.qemu-python-utils

Python tooling used by the QEMU project to build, configure, and test QEMU

nixos-unstable 0.6.1.0a1
- nixpkgs-unstable 0.6.1.0a1
- nixos-unstable-small 0.6.1.0a1
nixos-25.11 0.6.1.0a1
- nixos-25.11-small 0.6.1.0a1
- nixpkgs-25.11-darwin 0.6.1.0a1

pkgs.armTrustedFirmwareQemu

Reference implementation of secure world software for ARMv8-A

nixos-unstable 2.13.0
- nixpkgs-unstable 2.13.0
- nixos-unstable-small 2.13.0
nixos-25.11 2.13.0
- nixos-25.11-small 2.13.0
- nixpkgs-25.11-darwin 2.13.0

pkgs.python312Packages.qemu

Python tooling used by the QEMU project to build, configure, and test QEMU

nixos-25.11 0.6.1.0a1
- nixos-25.11-small 0.6.1.0a1
- nixpkgs-25.11-darwin 0.6.1.0a1

pkgs.python313Packages.qemu

Python tooling used by the QEMU project to build, configure, and test QEMU

nixos-unstable 0.6.1.0a1
- nixpkgs-unstable 0.6.1.0a1
- nixos-unstable-small 0.6.1.0a1
nixos-25.11 0.6.1.0a1
- nixos-25.11-small 0.6.1.0a1
- nixpkgs-25.11-darwin 0.6.1.0a1

pkgs.python314Packages.qemu

Python tooling used by the QEMU project to build, configure, and test QEMU

nixos-unstable 0.6.1.0a1
- nixpkgs-unstable 0.6.1.0a1
- nixos-unstable-small 0.6.1.0a1

pkgs.python312Packages.qemu-qmp

Asyncio library for communicating with QEMU Monitor Protocol (“QMP”) servers

nixos-25.11 0.0.5
- nixos-25.11-small 0.0.5
- nixpkgs-25.11-darwin 0.0.5

pkgs.python313Packages.qemu-qmp

Asyncio library for communicating with QEMU Monitor Protocol (“QMP”) servers

nixos-unstable 0.0.5
- nixpkgs-unstable 0.0.5
- nixos-unstable-small 0.0.5
nixos-25.11 0.0.5
- nixos-25.11-small 0.0.5
- nixpkgs-25.11-darwin 0.0.5

pkgs.python314Packages.qemu-qmp

Asyncio library for communicating with QEMU Monitor Protocol (“QMP”) servers

nixos-unstable 0.0.5
- nixpkgs-unstable 0.0.5
- nixos-unstable-small 0.0.5

Package maintainers

@lopsided98 Ben Wolsieffer <benwolsieffer@gmail.com>
@oxalica oxalica <oxalicc@pm.me>
@devplayer0 Jack O'Sullivan <dev@nul.ie>
@DavHau David Hauer <d.hauer.it@gmail.com>
@alyssais Alyssa Ross <hi@alyssa.is>
@SigmaSquadron Fernando Rodrigues <alpha@sigmasquadron.net>
@CertainLach Yaroslav Bolyukin <iam@lach.pw>
@hehongbo Hongbo
@digitalrane Rane <rane+git@junkyard.systems>
@bartsch Daniel Martin <consume.noise@gmail.com>
@dezgeg Tuomas Tynkkynen <tuomas.tynkkynen@iki.fi>
@brianmcgillion Brian McGillion <bmg.avoin@gmail.com>