Описание
A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| qemu | fixed | 1:10.1.1+ds-1 | package | |
| qemu | no-dsa | trixie | package | |
| qemu | no-dsa | bookworm | package | |
| qemu | postponed | bullseye | package |
Примечания
https://bugzilla.redhat.com/show_bug.cgi?id=2313497
https://gitlab.com/qemu-project/qemu/-/issues/2548
Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/d0af3cd0274e265435170a583c72b9f0a4100dff
Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/dfae27159d00de9259f95cf578784cfccb56ce04 (v10.1.1)
Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/746269eaae16423572ae7c0dfeb66140fa882149 (v10.0.5)
Fixed by: https://gitlab.com/qemu-project/qemu/-/commit/2ef88536a905a867260732541dd9a9661120e608 (v7.2.21)
EPSS
Связанные уязвимости
A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.
A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.
A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.
A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.
EPSS