PT-2017-3876 · Qemu+3 · Qemu+3

Dengzhan Heyuandong Bijunhua + 1 · Publicado 2017-12-01 · Atualizado 2020-11-10 · CVE-2017-17381

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description The issue is related to the Virtio Vring implementation in QEMU, which allows local OS guest users to cause a denial of service. This can be achieved by unsetting vring alignment while updating Virtio rings, resulting in a divide-by-zero error and a QEMU process crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Divide By Zero

Enumeração de Fraquezas

CWE-369

Identificadores relacionados

ALT-PU-2017-2764

ALT-PU-2017-2829

BDU:2019-04122

CVE-2017-17381

DSA-4213-1

OPENSUSE-SU-2018_0780-1

SUSE-SU-2018:0762-1

SUSE-SU-2018:0831-1

USN-3575-1

USN-3575-2

Produtos afetados

Alt Linux

Qemu

Suse

Ubuntu

Referências · 115

• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5715.md · Exploit
• 🔥 https://github.com/opsxcq/exploit-cve-2017-5715 · Exploit
• https://github.com/mathse/meltdown-spectre-bios-list · Nota
• https://linux.oracle.com/errata/ELSA-2018-4285.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-17381 · Nota de Segurança
• https://ubuntu.com/security/CVE-2017-14167 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-15124 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16845 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15289 · Nota de Segurança
• https://lists.gnu.org/archive/html/qemu-devel/2017-12/msg00166.html · Nota
• https://debian.org/security/2018/dsa-4213 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-7550.html · Nota
• https://bugzilla.suse.com/1083291 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15118 · Nota de Segurança
• http://openwall.com/lists/oss-security/2017/12/05/2 · Nota