Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-1544

Опубликовано: 23 мар. 2023
Источник: ubuntu
Приоритет: medium
CVSS3: 6

Описание

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of QEMU.

РелизСтатусПримечание
bionic

ignored

end of standard support, was deferred
devel

released

1:8.1.3+ds-1ubuntu1
esm-infra-legacy/trusty

not-affected

code not present
esm-infra-legacy/xenial

not-affected

code not present
esm-infra/bionic

not-affected

code not present
esm-infra/focal

released

1:4.2-3ubuntu6.28
esm-infra/xenial

ignored

end of ESM support, was needs-triage
focal

released

1:4.2-3ubuntu6.28
jammy

released

1:6.2+dfsg-2ubuntu6.16
kinetic

ignored

end of life, was deferred [2023-10-12]

Показывать по

6 Medium

CVSS3

Связанные уязвимости

CVSS3: 6
redhat
больше 3 лет назад

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of QEMU.

CVSS3: 6
nvd
больше 3 лет назад

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of QEMU.

CVSS3: 6.3
msrc
почти 2 года назад

Описание отсутствует

CVSS3: 6
debian
больше 3 лет назад

A flaw was found in the QEMU implementation of VMWare's paravirtual RD ...

suse-cvrf
7 месяцев назад

Security update for qemu

6 Medium

CVSS3