CVE-2017-18030

Опубликовано: 23 янв. 2018

Источник: nvd

CVSS3: 4.4

CVSS2: 2.1

EPSS Низкий

Описание

The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to negative pitch.

Ссылки

http://www.openwall.com/lists/oss-security/2018/01/15/3
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/102520
Third Party Advisory
VDB Entry
https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=f153b563f8cf121aebf5a2fff5f0110faf58ccb3
https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2018/01/15/3
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/102520
Third Party Advisory
VDB Entry
https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=f153b563f8cf121aebf5a2fff5f0110faf58ccb3
https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Версия до 2.8.1.1 (включая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 30%

0.00107

Низкий

4.4 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2017-18030

CVSS3: 4.4

ubuntu

больше 7 лет назад

CVE-2017-18030

CVSS3: 3

redhat

больше 8 лет назад

CVE-2017-18030

CVSS3: 4.4

debian

больше 7 лет назад

The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qe ...

GHSA-8v4h-p9x9-5mm5

CVSS3: 4.4

github

около 3 лет назад

SUSE-SU-2018:1308-1

suse-cvrf

около 7 лет назад

Security update for kvm

EPSS

Процентиль: 30%

0.00107

Низкий

4.4 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-125