PT-2019-5876 · Qemu+2 · Qemu+2
Publicado
2019-09-20
·
Atualizado
2021-04-23
·
CVE-2019-12068
CVSS v3.1
3.8
Baixa
| Vetor | AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
QEMU versions 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2
Description
The issue is related to an infinite loop in the LSI scsi adapter emulator. When executing a script in
lsi execute script(), the emulator advances the s->dsp index to read the next opcode, which can lead to an infinite loop if the next opcode is empty. This can cause a denial of service.Recommendations
For QEMU versions 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, update to version 1:2.1+dfsg-12+deb8u12 or later to resolve the issue.
As a temporary workaround, consider modifying the loop exit condition in
lsi execute script() to cover no-op opcodes and prevent the infinite loop.Correção
Infinite Loop
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Qemu
Suse
Ubuntu