Описание
The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2.1+dfsg-2ubuntu1 |
| esm-infra-legacy/trusty | not-affected | 2.0.0+dfsg-2ubuntu1.3 |
| lucid | DNE | |
| precise | DNE | |
| quantal | DNE | |
| saucy | ignored | end of life |
| trusty | released | 2.0.0+dfsg-2ubuntu1.3 |
| trusty/esm | not-affected | 2.0.0+dfsg-2ubuntu1.3 |
| upstream | needed |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| lucid | not-affected | code not present |
| precise | released | 1.0+noroms-0ubuntu14.17 |
| quantal | ignored | end of life |
| saucy | DNE | |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | needed |
Показывать по
EPSS
7.2 High
CVSS2
8.8 High
CVSS3
Связанные уязвимости
The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.
The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.
The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7 ...
The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.
ELSA-2014-0743: qemu-kvm security and bug fix update (MODERATE)
EPSS
7.2 High
CVSS2
8.8 High
CVSS3