Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-35414

Опубликовано: 11 июл. 2022
Источник: nvd
CVSS3: 8.8
CVSS2: 6.1
EPSS Низкий

Описание

softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., "Bugs affecting the non-virtualization use case are not considered security bugs at this time.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
Версия от 4.1.50 (включая) до 7.0.0 (включая)
Конфигурация 2
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 54%
0.00314
Низкий

8.8 High

CVSS3

6.1 Medium

CVSS2

Дефекты

CWE-908

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 3 лет назад

softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., "Bugs affecting the non-virtualization use case are not considered security bugs at this time.

redhat
больше 3 лет назад

softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., "Bugs affecting the non-virtualization use case are not considered security bugs at this time.

CVSS3: 8.8
msrc
больше 1 года назад

Описание отсутствует

CVSS3: 8.8
debian
больше 3 лет назад

softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized r ...

CVSS3: 8.8
github
больше 3 лет назад

softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash.

EPSS

Процентиль: 54%
0.00314
Низкий

8.8 High

CVSS3

6.1 Medium

CVSS2

Дефекты

CWE-908