Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-16847

Опубликовано: 02 нояб. 2018
Источник: nvd
CVSS3: 7
CVSS3: 7.8
CVSS2: 4.6
EPSS Низкий

Описание

An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cmb_ops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU process.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
Версия до 3.0.0 (включая)
cpe:2.3:a:qemu:qemu:3.1.0:rc0:*:*:*:*:*:*
cpe:2.3:a:qemu:qemu:3.1.0:rc1:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

EPSS

Процентиль: 30%
0.00109
Низкий

7 High

CVSS3

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-787
CWE-125

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 6 лет назад

An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cmb_ops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU process.

CVSS3: 7
redhat
больше 6 лет назад

An OOB heap buffer r/w access issue was found in the NVM Express Controller emulation in QEMU. It could occur in nvme_cmb_ops routines in nvme device. A guest user/process could use this flaw to crash the QEMU process resulting in DoS or potentially run arbitrary code with privileges of the QEMU process.

CVSS3: 7.8
debian
больше 6 лет назад

An OOB heap buffer r/w access issue was found in the NVM Express Contr ...

suse-cvrf
больше 6 лет назад

Security update for qemu

suse-cvrf
больше 6 лет назад

Security update for qemu

EPSS

Процентиль: 30%
0.00109
Низкий

7 High

CVSS3

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-787
CWE-125