PT-2018-1904 · Qemu+5 · Qemu+5

Cyrille Chatras

·

Publicado

2018-02-28

·

Atualizado

2024-01-30

·

CVE-2018-7550

CVSS v3.1

8.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Qemu (affected versions not specified)
Description The issue is related to the load multiboot function in Qemu, which can lead to an out-of-bounds read or write memory access when using multiboot. This can allow an attacker to execute arbitrary code on the Qemu host. The vulnerability is triggered by a mh load end addr value greater than mh bss end addr.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125CWE-787

Identificadores relacionados

ALT-PU-2018-1657
BDU:2018-01508
CESA-2018_2462
CVE-2018-7550
DLA-1350-1
DLA-1351-1
DLA-1497-1
DSA-4213-1
GHSA-F49V-45QP-CV53
OPENSUSE-SU-2018_0780-1
OPENSUSE-SU-2018_2402-1
RHSA-2018:1369
RHSA-2018:1643
RHSA-2018:1644
RHSA-2018:1645
RHSA-2018:1646
RHSA-2018:2462
RHSA-2018_2462
SUSE-SU-2018:0762-1
SUSE-SU-2018:0831-1
SUSE-SU-2018:1077-1
SUSE-SU-2018:1177-1
SUSE-SU-2018:1181-1
SUSE-SU-2018:1202-1
SUSE-SU-2018:1203-1
SUSE-SU-2018:1308-1
SUSE-SU-2018:2340-1
USN-3649-1

Produtos afetados

Alt Linux
Centos
Qemu
Red Hat
Suse
Ubuntu