PT-2016-4035 · Qemu+2 · Qemu+2
Donghai Zdh
·
Publicado
2013-11-29
·
Atualizado
2023-02-12
·
CVE-2015-8817
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
QEMU versions 1.6.0 through 2.3.1
Description
The issue is related to an OOB r/w access problem that could occur while doing pci dma read/write calls. This is due to QEMU's use of 'address space translate' to map an address to a MemoryRegionSection. A privileged user inside the guest could exploit this to crash the guest instance, resulting in a denial of service.
Recommendations
For QEMU versions 1.6.0 through 2.3.1, update to a version that contains a fix for this issue to prevent potential denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Out of bounds Read
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Qemu
Suse