Missing buffer limits when processing Qemu guest agent responses
Affected packages
qemu-server
Details
An attacker with access to a VM with configured guest agent can consume excessive memory usage on the host side during QGA response processing.
This issue was reported privately by Project Loupe.
Fixed in
- qemu-server >= 9.2.11
This page is an unofficial copy of the official Proxmox forum post (opens in a new tab). Always check the original before acting.