CVE-2017-5898

Опубликовано: 15 мар. 2017

Источник: nvd

CVSS3: 5.5

CVSS2: 2.1

EPSS Низкий

Описание

Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit.

Ссылки

http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=c7dfbf322595ded4e70b626bf83158a9f3807c6a
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/02/07/3
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/96112
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:1856
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2392
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1419699
Issue Tracking
Patch
https://security.gentoo.org/glsa/201702-28
Patch
Third Party Advisory
VDB Entry
http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=c7dfbf322595ded4e70b626bf83158a9f3807c6a
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/02/07/3
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/96112
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:1856
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:2392
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1419699
Issue Tracking
Patch
https://security.gentoo.org/glsa/201702-28
Patch
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Версия до 2.8.1.1 (включая)

Конфигурация 2

Одно из

cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:ltss:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server_for_sap:12:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*

EPSS

Процентиль: 28%

0.00094

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVE-2017-5898

CVSS3: 5.5

ubuntu

больше 8 лет назад

CVE-2017-5898

CVSS3: 4

redhat

больше 8 лет назад

CVE-2017-5898

CVSS3: 5.5

debian

больше 8 лет назад

Integer overflow in the emulated_apdu_from_guest function in usb/dev-s ...

GHSA-vfvm-h748-r758

CVSS3: 5.5

github

около 3 лет назад

BDU:2017-00651

fstec

больше 8 лет назад

Уязвимость эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 28%

0.00094

Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-190