CVE-2019-12067

Опубликовано: 02 июн. 2021

Источник: nvd

CVSS3: 6.5

CVSS2: 2.1

EPSS Низкий

Описание

The ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service (NULL dereference) when the command header 'ad->cur_cmd' is null.

Ссылки

https://bugzilla.suse.com/show_bug.cgi?id=1145642
Issue Tracking
Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2019-08/msg01358.html
Mailing List
Patch
Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2019-08/msg01487.html
Mailing List
Patch
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2019-12067
Third Party Advisory
https://security.netapp.com/advisory/ntap-20210727-0001/
Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1145642
Issue Tracking
Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2019-08/msg01358.html
Mailing List
Patch
Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2019-08/msg01487.html
Mailing List
Patch
Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2019-12067
Third Party Advisory
https://security.netapp.com/advisory/ntap-20210727-0001/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:qemu:qemu:-:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:redhat:openstack_platform:10.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:openstack_platform:14.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*

EPSS

Процентиль: 38%

0.00165

Низкий

6.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2019-12067

CVSS3: 6.5

ubuntu

больше 4 лет назад

The ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service (NULL dereference) when the command header 'ad->cur_cmd' is null.

CVE-2019-12067

CVSS3: 3.2

redhat

больше 6 лет назад

The ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service (NULL dereference) when the command header 'ad->cur_cmd' is null.

CVE-2019-12067

CVSS3: 6.5

debian

больше 4 лет назад

The ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to ...

GHSA-2m2h-fmqp-ffwh

CVSS3: 6.5

github

больше 3 лет назад

The ahci_commit_buf function in ide/ahci.c in QEMU allows attackers to cause a denial of service (NULL dereference) when the command header 'ad->cur_cmd' is null.

BDU:2020-02181

CVSS3: 3.3

fstec

больше 6 лет назад

Уязвимость программного обеспечения для эмуляции аппаратного обеспечения различных платформ QEMU, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 38%

0.00165

Низкий

6.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-476