Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-3301

Опубликовано: 13 сент. 2023
Источник: nvd
CVSS3: 5.6
EPSS Низкий

Описание

A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
Версия до 8.0.3 (включая)
Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 0%
0.00006
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-617
CWE-362

Связанные уязвимости

CVSS3: 5.6
ubuntu
почти 2 года назад

A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.

CVSS3: 5.6
redhat
около 2 лет назад

A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.

CVSS3: 5.6
msrc
9 месяцев назад

Описание отсутствует

CVSS3: 5.6
debian
почти 2 года назад

A flaw was found in QEMU. The async nature of hot-unplug enables a rac ...

CVSS3: 5.6
github
почти 2 года назад

A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.

EPSS

Процентиль: 0%
0.00006
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-617
CWE-362