Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-3301

Опубликовано: 13 сент. 2023
Источник: ubuntu
Приоритет: medium
CVSS3: 5.6

Описание

A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

not-affected

1:8.0.4+dfsg-1ubuntu5
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/bionic

not-affected

code not present
esm-infra/focal

not-affected

1:4.2-3ubuntu6.27
esm-infra/xenial

not-affected

code not present
focal

not-affected

1:4.2-3ubuntu6.27
jammy

released

1:6.2+dfsg-2ubuntu6.16
lunar

released

1:7.2+dfsg-5ubuntu2.4
mantic

not-affected

1:8.0.4+dfsg-1ubuntu3

Показывать по

5.6 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.6
redhat
около 2 лет назад

A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.

CVSS3: 5.6
nvd
почти 2 года назад

A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.

CVSS3: 5.6
msrc
9 месяцев назад

Описание отсутствует

CVSS3: 5.6
debian
почти 2 года назад

A flaw was found in QEMU. The async nature of hot-unplug enables a rac ...

CVSS3: 5.6
github
почти 2 года назад

A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.

5.6 Medium

CVSS3