PT-2018-3693 · Qemu+4 · Qemu+4

Publicado

2018-08-13

·

Atualizado

2024-06-15

·

CVE-2018-15746

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)
Description The issue is related to the qemu-seccomp.c component of the QEMU hardware emulator, specifically with the use of seccomp policy only for the main thread. This can be exploited to cause a denial of service, allowing an attacker to crash the guest system.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incomplete List of Disallowed Inputs

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-184

Identificadores relacionados

ALT-PU-2018-2870
BDU:2021-03347
CESA-2020_3906
CVE-2018-15746
OPENSUSE-SU-2018_4004-1
OPENSUSE-SU-2018_4147-1
OPENSUSE-SU-2024:11287-1
RHSA-2019:2425
RHSA-2020:3267
RHSA-2020:3906
RHSA-2020:3907
RHSA-2020_3906
RHSA-2020_3907
SUSE-SU-2018:3912-1
SUSE-SU-2018:3927-1
SUSE-SU-2018:3973-1
SUSE-SU-2018:3973-2
SUSE-SU-2018:3975-1
SUSE-SU-2018:3987-1
SUSE-SU-2018:4129-1
SUSE-SU-2018:4185-1
SUSE-SU-2018:4237-1

Produtos afetados

Alt Linux
Centos
Qemu
Red Hat
Suse