CVE-2015-8504: Debian Linux

Medium severity, CVSS 6.5. EPSS: 3.1% chance of exploitation in the next 30 days.

Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.

Affected products

• Debian Debian Linux: version 7.0 only; version 8.0 only
• Qemu Qemu: up to and including 2.4.1; version 2.5.0 only

Published 2017-04-11. Last modified 2026-06-17.