PT-2007-2761 · Qemu · Qemu

Publicado 2007-05-02 · Atualizado 2024-06-15 · CVE-2007-1366

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions QEMU version 0.8.2

Description The issue allows local users to crash a virtual machine by utilizing the divisor operand to the aam instruction. This can be demonstrated by the instruction "aam 0x0," which triggers a divide-by-zero error.

Recommendations For QEMU version 0.8.2, consider applying a patch or update that fixes the divide-by-zero error triggered by the aam instruction. As a temporary workaround, restrict the use of the aam instruction with a divisor operand of 0 to minimize the risk of virtual machine crashes.

Correção

Identificadores relacionados

CVE-2007-1366

DSA-1284-1

DTSA-133-1

DTSA-38-1

OPENSUSE-SU-2024:11520-1

Produtos afetados

Qemu

Referências · 111

• https://suse.com/security/cve/CVE-2020-15565 · Nota
• http://vupen.com/english/advisories/2007/1597 · Nota
• https://suse.com/security/cve/CVE-2020-11739 · Nota
• https://suse.com/security/cve/CVE-2016-9384 · Nota
• https://suse.com/security/cve/CVE-2016-9921 · Nota
• https://suse.com/security/cve/CVE-2020-25600 · Nota
• https://suse.com/security/cve/CVE-2016-10024 · Nota
• https://suse.com/security/cve/CVE-2020-25598 · Nota
• https://suse.com/security/cve/CVE-2018-7541 · Nota
• https://suse.com/security/cve/CVE-2020-25595 · Nota
• https://suse.com/security/cve/CVE-2020-25596 · Nota
• https://suse.com/security/cve/CVE-2018-10982 · Nota
• https://suse.com/security/cve/CVE-2020-29480 · Nota
• https://suse.com/security/cve/CVE-2020-11743 · Nota
• https://suse.com/security/cve/CVE-2020-25602 · Nota