PT-2015-1952 · Qemu+3 · Qemu+3
Martin Prpič
·
Publicado
2015-05-23
·
Atualizado
2024-06-15
·
CVE-2015-4037
CVSS v2.0
1.9
Baixa
| Vetor | AV:L/AC:M/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
QEMU versions prior to 2.3.0
Description
The issue is related to errors in the code of the
slirp smb function in the net/slirp.c component of the QEMU hardware emulator. This can be exploited by a local attacker using a specially crafted file, potentially leading to a denial of service. The slirp smb function creates temporary files with predictable names, allowing local users to cause an instantiation failure by creating specific files in the /tmp directory before the program.Recommendations
For QEMU versions prior to 2.3.0, update to version 2.3.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the
/tmp directory to prevent the creation of predictable temporary files.Exploit
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Qemu
Suse
Ubuntu