CVE-2017-8309

Опубликовано: 23 мая 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Низкий

Описание

Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture.

Ссылки

http://www.securityfocus.com/bid/98302
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:2408
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
Mailing List
Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg05587.html
Mailing List
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201706-03
Third Party Advisory
http://www.securityfocus.com/bid/98302
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:2408
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
Mailing List
Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2017-04/msg05587.html
Mailing List
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201706-03
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Версия до 2.9.1 (включая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:redhat:openstack:6.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openstack:10:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openstack:11:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02501

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-772

Связанные уязвимости

CVE-2017-8309

CVSS3: 7.5

ubuntu

около 8 лет назад

Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture.

CVE-2017-8309

CVSS3: 3

redhat

около 8 лет назад

Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture.

CVE-2017-8309

CVSS3: 7.5

debian

около 8 лет назад

Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows r ...

GHSA-xrhm-5q8w-r2vv

CVSS3: 7.5

github

около 3 лет назад

Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by repeatedly starting and stopping audio capture.

BDU:2017-01782

fstec

около 8 лет назад

Уязвимость компонента audio.c эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 85%

0.02501

Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-772