Denial Of Service (DoS)

2019-01-1509:09:49

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

32.1%

JSON

qemu-kvm-rhev is vulnerable to denial of service (DoS) attacks. The vulnerability exists as a use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.

CPENameOperatorVersion
qemu-kvm-rheveq2.1.2__23.el7_1.4
qemu-kvm-rheveq1.5.3__60.el7_0.10
qemu-kvm-rheveq2.1.2__23.el7_1.10
qemu-kvm-rheveq2.1.2__23.el7_1.3
qemu-kvm-rheveq2.1.2__23.el7_1.6
qemu-kvm-rheveq1.5.3__60.el7_0.11
qemu-kvm-rheveq2.1.2__23.el7_1.8
qemu-kvm-rheveq2.1.2__23.el7_1.9
qemu-kvm-rheveq2.1.2__23.el7_1.11
qemu-kvm-rheveq1.5.3__60.el7_0.7

Name	Operator	Version
qemu-kvm-rhev	eq	2.1.2__23.el7_1.4
qemu-kvm-rhev	eq	1.5.3__60.el7_0.10
qemu-kvm-rhev	eq	2.1.2__23.el7_1.10
qemu-kvm-rhev	eq	2.1.2__23.el7_1.3
qemu-kvm-rhev	eq	2.1.2__23.el7_1.6
qemu-kvm-rhev	eq	1.5.3__60.el7_0.11
qemu-kvm-rhev	eq	2.1.2__23.el7_1.8
qemu-kvm-rhev	eq	2.1.2__23.el7_1.9
qemu-kvm-rhev	eq	2.1.2__23.el7_1.11
qemu-kvm-rhev	eq	1.5.3__60.el7_0.7