Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4hmh-vx7h-h98p

Опубликовано: 12 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 6.7

Описание

A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.

A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.

EPSS

Процентиль: 5%
0.00158
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVSS3: 6.7
ubuntu
около 2 месяцев назад

A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.

CVSS3: 6.7
redhat
2 месяца назад

A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.

CVSS3: 6.7
nvd
около 2 месяцев назад

A flaw was found in QEMU's virtio-blk device. The issue arises because the device does not properly validate the size of input descriptors before writing data. A malicious guest with high privileges could exploit this vulnerability by submitting a malformed virtio-blk SCSI request, leading to an out-of-bounds write in the host heap memory and a potential denial of service (DoS) for the QEMU process.

CVSS3: 6.7
msrc
около 1 месяца назад

Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling

CVSS3: 6.7
debian
около 2 месяцев назад

A flaw was found in QEMU's virtio-blk device. The issue arises because ...

EPSS

Процентиль: 5%
0.00158
Низкий

6.7 Medium

CVSS3

Дефекты

CWE-122