Buffer Overflow

2019-07-0800:07:31

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.011 Low

EPSS

Percentile

84.3%

JSON

QEMU is vulnerable to buffer overflows. A remote, unauthenticated attacker could cause a system crash due to device tree size manipulation before buffer allocation leading to denial of service conditions. Affected by this issue is the function load_image of the file device_tree.c.

CPENameOperatorVersion
qemu-kvm-rheveq2.6.0__28.el7_3.3
qemu-kvm-rheveq2.3.0__31.el7_2.16
qemu-kvm-rheveq2.3.0__31.el7_2.15
qemu-kvm-rheveq2.3.0__31.el7
qemu-kvm-rheveq2.9.0__14.el7
qemu-kvm-rheveq2.6.0__28.el7_3.17
qemu-kvm-rheveq2.1.2__23.el7
qemu-kvm-rheveq2.10.0__21.el7
qemu-kvm-rheveq2.9.0__16.el7_4.5
qemu-kvm-rheveq2.10.0__21.el7_5.3

Name	Operator	Version
qemu-kvm-rhev	eq	2.6.0__28.el7_3.3
qemu-kvm-rhev	eq	2.3.0__31.el7_2.16
qemu-kvm-rhev	eq	2.3.0__31.el7_2.15
qemu-kvm-rhev	eq	2.3.0__31.el7
qemu-kvm-rhev	eq	2.9.0__14.el7
qemu-kvm-rhev	eq	2.6.0__28.el7_3.17
qemu-kvm-rhev	eq	2.1.2__23.el7
qemu-kvm-rhev	eq	2.10.0__21.el7
qemu-kvm-rhev	eq	2.9.0__16.el7_4.5
qemu-kvm-rhev	eq	2.10.0__21.el7_5.3