PT-2018-6623 · Qemu+2 · Qemu+2

Publicado 2017-04-25 · Atualizado 2020-09-10 · CVE-2017-18030

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Qemu (affected versions not specified)

Description: The issue allows local OS guest privileged users to cause a denial of service. This can be achieved through vectors related to negative pitch in the cirrus invalidate region function, leading to out-of-bounds array access and a QEMU process crash.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2017-1521

CVE-2017-18030

DLA-1497-1

OPENSUSE-SU-2018_0459-1

SUSE-SU-2018:0438-1

SUSE-SU-2018:0472-1

SUSE-SU-2018:0601-1

SUSE-SU-2018:0609-1

SUSE-SU-2018:0638-1

SUSE-SU-2018:0678-1

SUSE-SU-2018:0831-1

SUSE-SU-2018:1077-1

SUSE-SU-2018:1308-1

Produtos afetados

Alt Linux

Qemu

Suse

Referências · 221

• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5715.md · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5754.md · Exploit
• 🔥 https://github.com/opsxcq/exploit-cve-2017-5715 · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• https://github.com/Eugnis/spectre-attack · Nota
• https://github.com/ionescu007/SpecuCheck · Nota
• https://github.com/raphaelsc/Am-I-affected-by-Meltdown · Nota
• https://github.com/Viralmaniar/In-Spectre-Meltdown · Nota
• https://github.com/mathse/meltdown-spectre-bios-list · Nota
• https://github.com/00052/spectre-attack-example · Nota
• https://github.com/poilynx/spectre-attack-example · Nota
• https://github.com/ixtal23/spectreScope · Nota
• https://linux.oracle.com/errata/ELSA-2018-4285.html · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2018:0678-1 · Aviso do Fabricante