Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-26327

Опубликовано: 19 фев. 2024
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
Версия от 7.1.0 (включая) до 8.2.1 (включая)

EPSS

Процентиль: 26%
0.00088
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-787
CWE-122

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 1 года назад

An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.

CVSS3: 5.5
redhat
больше 1 года назад

An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.

CVSS3: 5.3
msrc
25 дней назад

Описание отсутствует

CVSS3: 5.3
debian
больше 1 года назад

An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in h ...

CVSS3: 5.3
github
больше 1 года назад

An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.

EPSS

Процентиль: 26%
0.00088
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-787
CWE-122