PT-2017-13004 · Qemu+5 · Qemu+5

David Buchanan

·

Publicado

2017-09-01

·

Atualizado

2020-11-10

·

CVE-2017-13672

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)
Description The issue allows local guest OS privileged users to cause a denial of service, resulting in an out-of-bounds read and a QEMU process crash. This is achieved through vectors involving display update when QEMU is built with the VGA display emulator support.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2017-2829
CESA-2018_0816
CESA-2018_2162
CVE-2017-13672
DSA-3991-1
OPENSUSE-SU-2017_2938-1
OPENSUSE-SU-2017_2941-1
OPENSUSE-SU-2019_1074-1
RHSA-2018:0816
RHSA-2018:1104
RHSA-2018:1113
RHSA-2018:2162
RHSA-2018_0816
RHSA-2018_2162
SUSE-SU-2017:2924-1
SUSE-SU-2017:2936-1
SUSE-SU-2017:2946-1
SUSE-SU-2017:2963-1
SUSE-SU-2017:2969-1
SUSE-SU-2017:3084-1
SUSE-SU-2017:3236-1
SUSE-SU-2017:3239-1
SUSE-SU-2017:3242-1
SUSE-SU-2017_3236-1
SUSE-SU-2017_3239-1
SUSE-SU-2017_3242-1
SUSE-SU-2019:0489-1
SUSE-SU-2019:0582-1
SUSE-SU-2019:0825-1
SUSE-SU-2019:0827-1
SUSE-SU-2019:13921-1
SUSE-SU-2019_0489-1
SUSE-SU-2019_0582-1
SUSE-SU-2019_0825-1
SUSE-SU-2019_0827-1
SUSE-SU-2019_13921-1
USN-3575-1
USN-3575-2

Produtos afetados

Alt Linux
Centos
Qemu
Red Hat
Suse
Ubuntu