Veracode Vulnerability DatabaseVERACODE:18295Denial Of Service (DoS)
EPSS
Percentile
84.7%
QEMU is vulnerable to denial of service attacks. A remote attacker could cause memory exhaustion resulting in denial of service. The vulnerability exists in the file audio/audio.c of the component Audio Capture and exploitable via repeatedly starting and stopping audio capture.
References
www.securityfocus.com/bid/98302
access.redhat.com/errata/RHSA-2017:2408
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1459661
bugzilla.redhat.com/show_bug.cgi?id=1459663
bugzilla.redhat.com/show_bug.cgi?id=1459664
bugzilla.redhat.com/show_bug.cgi?id=1459666
bugzilla.redhat.com/show_bug.cgi?id=1459667
bugzilla.redhat.com/show_bug.cgi?id=1459668
lists.debian.org/debian-lts-announce/2018/09/msg00007.html
lists.gnu.org/archive/html/qemu-devel/2017-04/msg05587.html
security.gentoo.org/glsa/201706-03
Related
