CVE-2008-5714: Qemu

High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Off-by-one error in monitor.c in Qemu 0.9.1 might make it easier for remote attackers to guess the VNC password, which is limited to seven characters where eight was intended.

Affected products

• Qemu Qemu: version 0.9.1 only

Published 2008-12-24. Last modified 2026-06-16.