QEMU (aka Quick Emulator), when built with the IDE disk and CD/DVD-ROM Emulator support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by flushing an empty CDROM device drive.
CPE | Name | Operator | Version |
---|---|---|---|
debian_linux | eq | 9.0 | |
qemu | le | 2.9.1 | |
qemu | eq | 2.10.0 rc0 | |
qemu | eq | 2.10.0 rc1 | |
qemu | eq | 2.10.0 rc2 |