Описание
The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| qemu | fixed | 1:3.1+dfsg-2 | package | |
| qemu | ignored | stretch | package | |
| qemu | ignored | jessie | package | |
| qemu-kvm | removed | package |
Примечания
initial patch disputed
https://lists.gnu.org/archive/html/qemu-devel/2018-10/msg03822.html
second patch never accepted, no activity as of 20190909
https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg03570.html
https://lists.gnu.org/archive/html/qemu-devel/2019-01/msg07426.html
https://github.com/qemu/qemu/commit/c0188e69d (bluetooth subsystem deprecated in 3.1)
https://github.com/qemu/qemu/commit/1d4ffe8dc (bluetooth subsystem removed in 5.0)
EPSS
Связанные уязвимости
The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.
The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.
The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.
The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.
EPSS