Описание
In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference.
A NULL pointer dereference flaw was found in various system emulators of QEMU that occurs while performing MMIO r/w operations when the respective handler function is not defined. This flaw allows a privileged guest user to invoke the MMIO operation to crash the QEMU process on the host, resulting in a denial of service.
Отчет
In Red Hat OpenStack Platform, because the flaw has a lower impact and the fix would require a substantial amount of development, no update will be provided at this time for the RHOSP qemu-kvm-rhev package.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | kvm | Not affected | ||
| Red Hat Enterprise Linux 6 | qemu-kvm | Not affected | ||
| Red Hat Enterprise Linux 7 | qemu-kvm | Fix deferred | ||
| Red Hat Enterprise Linux 7 | qemu-kvm-ma | Fix deferred | ||
| Red Hat Enterprise Linux 7 | qemu-kvm-rhev | Fix deferred | ||
| Red Hat Enterprise Linux 8 | virt:rhel/qemu-kvm | Fix deferred | ||
| Red Hat Enterprise Linux 8 Advanced Virtualization | virt:8.2/qemu-kvm | Fix deferred | ||
| Red Hat Enterprise Linux 9 | qemu-kvm | Not affected | ||
| Red Hat OpenStack Platform 10 (Newton) | qemu-kvm-rhev | Will not fix | ||
| Red Hat OpenStack Platform 13 (Queens) | qemu-kvm-rhev | Will not fix |
Показывать по
Дополнительная информация
Статус:
2.3 Low
CVSS3
Связанные уязвимости
In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference.
In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference.
In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback m ...
In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference.
2.3 Low
CVSS3