Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v28g-xr7w-fvp4

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati-2d.c while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service.

An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati-2d.c while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service.

EPSS

Процентиль: 26%
0.00093
Низкий

Связанные уязвимости

CVSS3: 3.3
ubuntu
почти 6 лет назад

An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati-2d.c while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service.

CVSS3: 2.8
redhat
почти 6 лет назад

An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati-2d.c while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service.

CVSS3: 3.3
nvd
почти 6 лет назад

An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati-2d.c while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service.

CVSS3: 3.3
msrc
больше 5 лет назад

Описание отсутствует

CVSS3: 3.3
debian
почти 6 лет назад

An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way i ...

EPSS

Процентиль: 26%
0.00093
Низкий