PT-2018-2473 · Qemu+5 · Qemu+5

Jiang Xin + 1 · Publicado 2018-01-23 · Atualizado 2020-10-15 · CVE-2018-5683

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description The issue is related to the vga draw text function in QEMU, which is associated with incorrect input validation. This can lead to a denial of service, causing an out-of-bounds read and a crash of the QEMU process. Local OS guest privileged users can exploit this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2018-1226

ALT-PU-2018-1657

BDU:2019-00716

CESA-2018_0816

CESA-2018_2162

CVE-2018-5683

DLA-1497-1

DSA-4213-1

OPENSUSE-SU-2018_0459-1

OPENSUSE-SU-2018_0780-1

RHSA-2018:0816

RHSA-2018:1104

RHSA-2018:1113

RHSA-2018:2162

RHSA-2018_0816

RHSA-2018_2162

SUSE-SU-2018:0438-1

SUSE-SU-2018:0472-1

SUSE-SU-2018:0601-1

SUSE-SU-2018:0609-1

SUSE-SU-2018:0638-1

SUSE-SU-2018:0678-1

SUSE-SU-2018:0762-1

SUSE-SU-2018:0831-1

SUSE-SU-2018:1077-1

SUSE-SU-2018:1308-1

USN-3575-1

USN-3575-2

Produtos afetados

Alt Linux

Centos

Qemu

Red Hat

Suse

Ubuntu

Referências · 273

• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5715.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5754.md · Exploit
• 🔥 https://github.com/opsxcq/exploit-cve-2017-5715 · Exploit
• 🔥 https://github.com/mmxsrup/CVE-2018-3639 · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• 🔥 https://lists.gnu.org/archive/html/qemu-devel/2018-01/msg02597.html · Exploit
• https://github.com/Eugnis/spectre-attack · Nota
• https://github.com/ionescu007/SpecuCheck · Nota
• https://github.com/raphaelsc/Am-I-affected-by-Meltdown · Nota
• https://github.com/Viralmaniar/In-Spectre-Meltdown · Nota
• https://github.com/mathse/meltdown-spectre-bios-list · Nota
• https://github.com/00052/spectre-attack-example · Nota
• https://github.com/poilynx/spectre-attack-example · Nota
• https://github.com/ixtal23/spectreScope · Nota