PT-2017-1620 · Qemu+3 · Qemu+3

Jiang Xin

+1

·

Publicado

2017-03-20

·

Atualizado

2020-11-10

·

CVE-2017-5987

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)
Description The issue is related to the sdhci sdma transfer multi blocks function in hw/sd/sdhci.c, which allows local OS guest privileged users to cause a denial of service. This can be achieved via vectors involving the transfer mode register during multi-block transfer, resulting in an infinite loop and QEMU process crash. The problem is associated with incorrect system resource management.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Infinite Loop

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399CWE-835

Identificadores relacionados

ALT-PU-2017-1521
BDU:2017-00773
CVE-2017-5987
DLA-1497-1
OPENSUSE-SU-2017_1872-1
SUSE-SU-2017:1774-1
SUSE-SU-2017:2946-1
SUSE-SU-2017:2969-1
USN-3261-1
USN-3268-1

Produtos afetados

Alt Linux
Qemu
Suse
Ubuntu