CVE-2017-12809

Опубликовано: 23 авг. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 2.1

EPSS Низкий

Описание

QEMU (aka Quick Emulator), when built with the IDE disk and CD/DVD-ROM Emulator support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by flushing an empty CDROM device drive.

Ссылки

http://www.debian.org/security/2017/dsa-3991
Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/08/21/2
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/100451
Third Party Advisory
VDB Entry
https://lists.gnu.org/archive/html/qemu-devel/2017-08/msg01850.html
Patch
Third Party Advisory
http://www.debian.org/security/2017/dsa-3991
Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/08/21/2
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/100451
Third Party Advisory
VDB Entry
https://lists.gnu.org/archive/html/qemu-devel/2017-08/msg01850.html
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Версия до 2.9.1 (включая)

cpe:2.3:a:qemu:qemu:2.10.0:rc0:*:*:*:*:*:*

cpe:2.3:a:qemu:qemu:2.10.0:rc1:*:*:*:*:*:*

cpe:2.3:a:qemu:qemu:2.10.0:rc2:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 27%

0.0009

Низкий

6.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2017-12809

CVSS3: 6.5

ubuntu

почти 8 лет назад

CVE-2017-12809

CVSS3: 3.4

redhat

почти 8 лет назад

CVE-2017-12809

CVSS3: 6.5

debian

почти 8 лет назад

QEMU (aka Quick Emulator), when built with the IDE disk and CD/DVD-ROM ...

GHSA-2m2j-2qxm-fr56

CVSS3: 6.5

github

около 3 лет назад

openSUSE-SU-2017:2938-1

suse-cvrf

больше 7 лет назад

Security update for qemu

EPSS

Процентиль: 27%

0.0009

Низкий

6.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-476