Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-1544

Опубликовано: 23 мар. 2023
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 6

Описание

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of QEMU.

РелизСтатусПримечание
bionic

ignored

end of standard support, was deferred
devel

released

1:8.1.3+ds-1ubuntu1
esm-infra-legacy/trusty

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

not-affected

1:4.2-3ubuntu6.28
esm-infra/xenial

needs-triage

focal

released

1:4.2-3ubuntu6.28
jammy

released

1:6.2+dfsg-2ubuntu6.16
kinetic

ignored

end of life, was deferred [2023-10-12]
lunar

released

1:7.2+dfsg-5ubuntu2.4

Показывать по

EPSS

Процентиль: 14%
0.00046
Низкий

6 Medium

CVSS3

Связанные уязвимости

CVSS3: 6
redhat
больше 2 лет назад

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of QEMU.

CVSS3: 6
nvd
больше 2 лет назад

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of QEMU.

CVSS3: 6.3
msrc
2 месяца назад

Описание отсутствует

CVSS3: 6
debian
больше 2 лет назад

A flaw was found in the QEMU implementation of VMWare's paravirtual RD ...

CVSS3: 5.5
github
больше 2 лет назад

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of QEMU.

EPSS

Процентиль: 14%
0.00046
Низкий

6 Medium

CVSS3

Уязвимость CVE-2023-1544