Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-35414

Опубликовано: 11 июл. 2022
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 6.1
CVSS3: 8.8

Описание

softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., "Bugs affecting the non-virtualization use case are not considered security bugs at this time.

РелизСтатусПримечание
bionic

not-affected

code not present
devel

not-affected

esm-infra-legacy/trusty

not-affected

code not present
esm-infra/bionic

not-affected

code not present
esm-infra/focal

not-affected

code not present
esm-infra/xenial

not-affected

code not present
focal

not-affected

code not present
impish

ignored

end of life
jammy

not-affected

kinetic

not-affected

Показывать по

EPSS

Процентиль: 54%
0.00314
Низкий

6.1 Medium

CVSS2

8.8 High

CVSS3

Связанные уязвимости

redhat
больше 3 лет назад

softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., "Bugs affecting the non-virtualization use case are not considered security bugs at this time.

CVSS3: 8.8
nvd
больше 3 лет назад

softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., "Bugs affecting the non-virtualization use case are not considered security bugs at this time.

CVSS3: 8.8
msrc
больше 1 года назад

Описание отсутствует

CVSS3: 8.8
debian
больше 3 лет назад

softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized r ...

CVSS3: 8.8
github
больше 3 лет назад

softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash.

EPSS

Процентиль: 54%
0.00314
Низкий

6.1 Medium

CVSS2

8.8 High

CVSS3

Уязвимость CVE-2022-35414