PT-2015-7062 · Qemu+3 · Qemu+3
Prasad J Pandit
·
Publicado
2015-08-06
·
Atualizado
2022-02-20
·
CVE-2015-5745
CVSS v3.1
6.5
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
QEMU versions prior to 2.4.0
Description
The issue allows a guest user to cause a denial of service, resulting in the QEMU process crashing. This can be achieved by sending a crafted virtio control message. A user logged on to the guest OS can exploit this to cause QEMU to crash.
Recommendations
For versions prior to 2.4.0, update to version 2.4.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the
send control msg function in the hw/char/virtio-serial-bus.c file until a patch is available.Exploit
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Qemu
Suse
Ubuntu