PT-2017-18884 · Alt Linux+3 · Alt Linux+3

Publicado

2017-04-25

·

Atualizado

2020-11-10

·

CVE-2017-9373

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions QEMU versions (affected versions not specified) ALT Linux (affected versions not specified)
Description A memory leak issue exists, allowing local guest OS privileged users to cause a denial of service by consuming memory. This is achieved by repeatedly hot-unplugging the AHCI device in QEMU when it is built with IDE AHCI Emulation support.
Recommendations For QEMU, consider disabling the IDE AHCI Emulation support as a temporary workaround until a patch is available. For ALT Linux, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

DoS

Memory Leak

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-401

Identificadores relacionados

ALT-PU-2017-1521
CVE-2017-9373
DLA-1497-1
DSA-3920-1
OPENSUSE-SU-2017_1872-1
RHSA-2017:2392
RHSA-2017:2408
SUSE-SU-2017:1774-1
SUSE-SU-2017:2946-1
SUSE-SU-2017:2963-1
SUSE-SU-2017:2969-1
SUSE-SU-2017:3084-1
USN-3414-1
USN-3414-2

Produtos afetados

Alt Linux
Qemu
Suse
Ubuntu