Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2024-8354

Опубликовано: 19 сент. 2024
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 5.5

Описание

A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.

РелизСтатусПримечание
devel

not-affected

1:10.2.1+ds-1ubuntu2
esm-infra-legacy/trusty

released

2.0.0+dfsg-2ubuntu1.47+esm6
esm-infra-legacy/xenial

released

1:2.5+dfsg-5ubuntu10.51+esm4
esm-infra/bionic

released

1:2.11+dfsg-1ubuntu7.42+esm5
esm-infra/focal

released

1:4.2-3ubuntu6.30+esm1
esm-infra/xenial

ignored

end of ESM support, was needed
focal

ignored

end of standard support, was deferred [2025-05-26]
jammy

released

1:6.2+dfsg-2ubuntu6.28
noble

released

1:8.2.2+ds-0ubuntu1.13
oracular

ignored

end of life, was deferred [2025-05-26]

Показывать по

EPSS

Процентиль: 20%
0.00286
Низкий

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
redhat
почти 2 года назад

A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.

CVSS3: 5.5
nvd
почти 2 года назад

A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.

CVSS3: 5.5
msrc
10 месяцев назад

Qemu-kvm: usb: assertion failure in usb_ep_get()

CVSS3: 5.5
debian
почти 2 года назад

A flaw was found in QEMU. An assertion failure was present in the usb_ ...

CVSS3: 4.7
github
почти 2 года назад

A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.

EPSS

Процентиль: 20%
0.00286
Низкий

5.5 Medium

CVSS3