Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-11434

Опубликовано: 17 июл. 2017
Источник: redhat
CVSS3: 4.3
CVSS2: 2.9
EPSS Низкий

Описание

The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a crafted DHCP options string.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5kvmWill not fix
Red Hat Enterprise Linux 5xenNot affected
Red Hat Enterprise Linux 6qemu-kvmWill not fix
Red Hat Enterprise Linux 7qemu-kvmWill not fix
Red Hat Enterprise Linux 7qemu-kvm-rhevWill not fix
Red Hat Enterprise Linux OpenStack Platform 5 (Icehouse)qemu-kvm-rhevWill not fix
Red Hat Enterprise Linux OpenStack Platform 6 (Juno)qemu-kvm-rhevWill not fix
Red Hat Enterprise Linux OpenStack Platform 7 (Kilo)qemu-kvm-rhevWill not fix
Red Hat OpenStack Platform 10 (Newton)qemu-kvm-rhevWill not fix
Red Hat OpenStack Platform 11 (Ocata)qemu-kvm-rhevWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=1472611Qemu: slirp: out-of-bounds read while parsing dhcp options

EPSS

Процентиль: 16%
0.00052
Низкий

4.3 Medium

CVSS3

2.9 Low

CVSS2

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 8 лет назад

The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a crafted DHCP options string.

CVSS3: 5.5
nvd
больше 8 лет назад

The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a crafted DHCP options string.

CVSS3: 5.5
debian
больше 8 лет назад

The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) ...

CVSS3: 5.5
github
больше 3 лет назад

The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a crafted DHCP options string.

suse-cvrf
больше 8 лет назад

Security update for qemu

EPSS

Процентиль: 16%
0.00052
Низкий

4.3 Medium

CVSS3

2.9 Low

CVSS2