PT-2017-12008 · Qemu+3 · Qemu+3

Reno Robert

·

Publicado

2017-07-25

·

Atualizado

2024-06-15

·

CVE-2017-11434

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)
Description The issue allows local guest OS users to cause a denial of service, resulting in an out-of-bounds read and a QEMU process crash. This is achieved via a crafted DHCP options string.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2017-1993
ALT-PU-2017-2175
CVE-2017-11434
DLA-1070-1
DLA-1071-1
DLA-1497-1
DSA-3925-1
OPENSUSE-SU-2017_2394-1
OPENSUSE-SU-2017_2398-1
OPENSUSE-SU-2017_2513-1
OPENSUSE-SU-2017_2941-1
OPENSUSE-SU-2024:11287-1
SUSE-SU-2017:2319-1
SUSE-SU-2017:2326-1
SUSE-SU-2017:2327-1
SUSE-SU-2017:2327-2
SUSE-SU-2017:2339-1
SUSE-SU-2017:2416-1
SUSE-SU-2017:2450-1
SUSE-SU-2017:2541-1
SUSE-SU-2017:2936-1
SUSE-SU-2017:2946-1
SUSE-SU-2017:2963-1
SUSE-SU-2017:2969-1
SUSE-SU-2017:3084-1
USN-3414-1
USN-3414-2

Produtos afetados

Alt Linux
Qemu
Suse
Ubuntu