Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-3567

Опубликовано: 10 апр. 2024
Источник: nvd
CVSS3: 5.5
EPSS Низкий

Описание

A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in hw/net/net_tx_pkt.c when trying to calculate the checksum of a short-sized fragmented packet. This flaw allows a malicious guest to crash QEMU and cause a denial of service condition.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
Версия от 8.1.0 (включая) до 8.2.3 (исключая)
cpe:2.3:a:qemu:qemu:9.0.0:rc0:*:*:*:*:*:*
cpe:2.3:a:qemu:qemu:9.0.0:rc1:*:*:*:*:*:*
cpe:2.3:a:qemu:qemu:9.0.0:rc2:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 26%
0.00088
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-617

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 1 года назад

A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in hw/net/net_tx_pkt.c when trying to calculate the checksum of a short-sized fragmented packet. This flaw allows a malicious guest to crash QEMU and cause a denial of service condition.

CVSS3: 5.5
redhat
около 1 года назад

A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in hw/net/net_tx_pkt.c when trying to calculate the checksum of a short-sized fragmented packet. This flaw allows a malicious guest to crash QEMU and cause a denial of service condition.

CVSS3: 5.5
msrc
около 2 месяцев назад

Описание отсутствует

CVSS3: 5.5
debian
около 1 года назад

A flaw was found in QEMU. An assertion failure was present in the upda ...

CVSS3: 5.5
redos
12 месяцев назад

Уязвимость qemu

EPSS

Процентиль: 26%
0.00088
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-617