Описание
The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function's return value, which allows guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2.2+dfsg-5expubuntu9 |
| esm-infra-legacy/trusty | released | 2.0.0+dfsg-2ubuntu1.17 |
| lucid | DNE | |
| precise | DNE | |
| trusty | released | 2.0.0+dfsg-2ubuntu1.17 |
| trusty/esm | released | 2.0.0+dfsg-2ubuntu1.17 |
| upstream | released | 2.2.0 |
| utopic | ignored | end of life |
| vivid | not-affected | 2.2+dfsg-5expubuntu9 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | DNE | |
| esm-infra-legacy/trusty | DNE | |
| lucid | ignored | end of life |
| precise | released | 1.0+noroms-0ubuntu14.24 |
| trusty | DNE | |
| trusty/esm | DNE | |
| upstream | needs-triage | |
| utopic | DNE | |
| vivid | DNE |
Показывать по
EPSS
4.9 Medium
CVSS2
Связанные уязвимости
The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function's return value, which allows guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions.
The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function's return value, which allows guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions.
The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in ...
The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function's return value, which allows guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions.
EPSS
4.9 Medium
CVSS2