Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v4q2-79g6-j728

Опубликовано: 20 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Buffer Overflow vulnerability in Qemu before v.8.2.0 allows a remote attacker to execute arbitrary code via the async_len variable to the FIFO buffer component.

Buffer Overflow vulnerability in Qemu before v.8.2.0 allows a remote attacker to execute arbitrary code via the async_len variable to the FIFO buffer component.

EPSS

Процентиль: 32%
0.00121
Низкий

8.8 High

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 1 года назад

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because of an underflow of async_len.

CVSS3: 5.3
redhat
больше 1 года назад

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because of an underflow of async_len.

CVSS3: 8.8
nvd
больше 1 года назад

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because of an underflow of async_len.

CVSS3: 8.8
msrc
9 месяцев назад

Описание отсутствует

CVSS3: 8.8
debian
больше 1 года назад

QEMU before 8.2.0 has an integer underflow, and resultant buffer overf ...

EPSS

Процентиль: 32%
0.00121
Низкий

8.8 High

CVSS3

Дефекты

CWE-120