Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-5525

Опубликовано: 15 мар. 2017
Источник: debian
EPSS Низкий

Описание

Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
qemufixed1:2.8+dfsg-2package
qemuno-dsawheezypackage
qemu-kvmremovedpackage
qemu-kvmno-dsawheezypackage

Примечания

  • https://lists.nongnu.org/archive/html/qemu-devel/2017-01/msg01740.html

  • http://git.qemu.org/?p=qemu.git;a=commit;h=12351a91da97b414eec8cdb09f1d9f41e535a401

  • Sound device hotplug not supported by libvirt

EPSS

Процентиль: 35%
0.00143
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 9 лет назад

Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.

CVSS3: 4.1
redhat
около 9 лет назад

Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.

CVSS3: 6.5
nvd
почти 9 лет назад

Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.

CVSS3: 6.5
github
больше 3 лет назад

Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.

fstec
почти 9 лет назад

Уязвимость эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 35%
0.00143
Низкий