Описание
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of src_len and dst_len in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support |
| devel | not-affected | 1:8.0.4+dfsg-1ubuntu5 |
| esm-infra-legacy/trusty | not-affected | code not present |
| esm-infra/bionic | needs-triage | |
| esm-infra/focal | not-affected | 1:4.2-3ubuntu6.28 |
| esm-infra/xenial | not-affected | code not present |
| focal | released | 1:4.2-3ubuntu6.28 |
| jammy | released | 1:6.2+dfsg-2ubuntu6.16 |
| lunar | released | 1:7.2+dfsg-5ubuntu2.4 |
| mantic | not-affected | 1:8.0.4+dfsg-1ubuntu3 |
Показывать по
EPSS
6 Medium
CVSS3
Связанные уязвимости
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
A flaw was found in the QEMU virtual crypto device while handling data ...
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
EPSS
6 Medium
CVSS3