Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7p47-wfc3-mcqv

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6

Описание

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting in a denial of service. This flaw affects QEMU versions prior to 5.2.0.

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting in a denial of service. This flaw affects QEMU versions prior to 5.2.0.

EPSS

Процентиль: 4%
0.00022
Низкий

6 Medium

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 6
ubuntu
больше 4 лет назад

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting in a denial of service. This flaw affects QEMU versions prior to 5.2.0.

CVSS3: 5.7
redhat
больше 4 лет назад

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting in a denial of service. This flaw affects QEMU versions prior to 5.2.0.

CVSS3: 6
nvd
больше 4 лет назад

A flaw was found in the memory management API of QEMU during the initialization of a memory region cache. This issue could lead to an out-of-bounds write access to the MSI-X table while performing MMIO operations. A guest user may abuse this flaw to crash the QEMU process on the host, resulting in a denial of service. This flaw affects QEMU versions prior to 5.2.0.

CVSS3: 6
msrc
больше 4 лет назад

Описание отсутствует

CVSS3: 6
debian
больше 4 лет назад

A flaw was found in the memory management API of QEMU during the initi ...

EPSS

Процентиль: 4%
0.00022
Низкий

6 Medium

CVSS3

Дефекты

CWE-787