CVE-2017-8112

Опубликовано: 02 мая 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 4.9

EPSS Низкий

Описание

hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count.

Ссылки

http://www.openwall.com/lists/oss-security/2017/04/26/5
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/98015
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1445621
Issue Tracking
Third Party Advisory
VDB Entry
https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
Mailing List
Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04578.html
Mailing List
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201706-03
Third Party Advisory
http://www.openwall.com/lists/oss-security/2017/04/26/5
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/98015
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1445621
Issue Tracking
Third Party Advisory
VDB Entry
https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
Mailing List
Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg04578.html
Mailing List
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201706-03
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Версия до 2.9.1 (включая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 18%

0.00056

Низкий

6.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-835

Связанные уязвимости

CVE-2017-8112

CVSS3: 6.5

ubuntu

около 8 лет назад

hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count.

CVE-2017-8112

CVSS3: 3

redhat

около 8 лет назад

hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count.

CVE-2017-8112

CVSS3: 6.5

debian

около 8 лет назад

hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest O ...

GHSA-q6cx-7x3w-57hw

CVSS3: 6.5

github

около 3 лет назад

hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count.

SUSE-SU-2017:1770-1

suse-cvrf

почти 8 лет назад

Security update for xen

EPSS

Процентиль: 18%

0.00056

Низкий

6.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-835