PT-2017-3865 · Qemu+5 · Qemu+5
Guoxiang Niu
·
Publicado
2017-10-11
·
Atualizado
2024-06-15
·
CVE-2017-15289
CVSS v3.1
6.0
Média
| Vetor | AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Qemu (affected versions not specified)
Description
The issue is related to the mode4and5 write functions in the hw/display/cirrus vga.c file of Qemu, allowing local OS guest privileged users to cause a denial of service. This can be achieved through vectors related to dst calculation, resulting in out-of-bounds write access and a Qemu process crash. The vulnerability is also described as a buffer overflow issue in the mode4and5 function of the Qemu hardware emulator, which can be exploited to cause a denial of service.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Qemu
Red Hat
Suse
Ubuntu