Arbitrary Code Execution

2020-06-0203:15:00

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.004 Low

EPSS

Percentile

72.3%

JSON

qemu-kvm-rhev is vulnerable to arbitrary code execution. The vulnerability exists in slirp where an out of bounds (OOB) buffer access while emulating tcp protocols in tcp_emu().

CPENameOperatorVersion
qemu-kvm-rheveq2.3.0__31.el7_2.4
qemu-kvm-rheveq2.1.2__23.el7_1.6
qemu-kvm-rheveq2.3.0__31.el7_2.10
qemu-kvm-rheveq2.9.0__16.el7_4.14
qemu-kvm-rheveq2.10.0__21.el7_5.6
qemu-kvm-rheveq2.12.0__33.el7
qemu-kvm-rheveq2.12.0__18.el7_6.7
qemu-kvm-rheveq2.1.2__23.el7_1.1
qemu-kvm-rheveq2.3.0__31.el7_2.16
qemu-kvm-rheveq2.6.0__28.el7_3.17

Name	Operator	Version
qemu-kvm-rhev	eq	2.3.0__31.el7_2.4
qemu-kvm-rhev	eq	2.1.2__23.el7_1.6
qemu-kvm-rhev	eq	2.3.0__31.el7_2.10
qemu-kvm-rhev	eq	2.9.0__16.el7_4.14
qemu-kvm-rhev	eq	2.10.0__21.el7_5.6
qemu-kvm-rhev	eq	2.12.0__33.el7
qemu-kvm-rhev	eq	2.12.0__18.el7_6.7
qemu-kvm-rhev	eq	2.1.2__23.el7_1.1
qemu-kvm-rhev	eq	2.3.0__31.el7_2.16
qemu-kvm-rhev	eq	2.6.0__28.el7_3.17