Lucene search
Veracode Vulnerability DatabaseVERACODE:27028HistorySep 21, 2020 - 6:31 a.m.
Denial Of Service (DoS)
2020-09-2106:31:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
26.7%
QEMU (aka Quick Emulator) is vulnerable to denial of service (DoS). When built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, it allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing.
| CPE | Name | Operator | Version |
|---|---|---|---|
| qemu:xenial | eq | 1:2.5+dfsg-5ubuntu10 | |
| qemu:stretch | eq | 1:2.8+dfsg-6+deb9u9 |
References
www.openwall.com/lists/oss-security/2017/06/08/1
www.securityfocus.com/bid/99010
bugzilla.redhat.com/show_bug.cgi?id=1459477
lists.debian.org/debian-lts-announce/2018/09/msg00007.html
lists.debian.org/debian-lts-announce/2020/07/msg00020.html
lists.gnu.org/archive/html/qemu-devel/2017-06/msg01309.html
lists.gnu.org/archive/html/qemu-devel/2017-06/msg01313.html
Related
ubuntucve
ubuntucve
CVE-2017-9503
2017-06-16 00:00:00
prion
prion
Null pointer dereference
2017-06-16 22:29:00
nvd
nvd
CVE-2017-9503
2017-06-16 22:29:00
debiancve
debiancve
CVE-2017-9503
2017-06-16 22:29:00
osv
osv
CVE-2017-9503
2017-06-16 22:29:00
qemu - security update
2020-07-25 00:00:00
qemu - security update
2018-09-06 00:00:00
cve
cve
CVE-2017-9503
2017-06-16 22:29:00
redhatcve
redhatcve
CVE-2017-9503
2017-06-07 17:18:49
cvelist
cvelist
CVE-2017-9503
2017-06-16 22:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2017:1770-1)
2021-06-09 00:00:00
Ubuntu: Security Advisory (USN-3414-2)
2017-09-21 00:00:00
Debian: Security Advisory (DLA-2288-1)
2020-07-27 00:00:00
nessus
nessus
SUSE SLES11 Security Update : xen (SUSE-SU-2017:1770-1)
2017-07-05 00:00:00
Debian DLA-2288-1 : qemu security update
2020-07-27 00:00:00
Ubuntu 14.04 LTS / 16.04 LTS : QEMU vulnerabilities (USN-3414-1)
2017-09-14 00:00:00
suse
suse
Security update for xen (important)
2017-07-04 21:11:17
Security update for xen (important)
2017-07-06 15:15:02
Security update for xen (important)
2017-07-07 15:09:38
debian
debian
[SECURITY] [DLA 2288-1] qemu security update
2020-07-26 11:51:28
[SECURITY] [DLA 1497-1] qemu security update
2018-09-06 18:49:12
ubuntu
ubuntu
QEMU vulnerabilities
2017-09-13 00:00:00
QEMU regression
2017-09-20 00:00:00
oraclelinux
oraclelinux
qemu security update
2018-11-28 00:00:00
qemu security update
2018-11-20 00:00:00
qemu security update
2019-03-15 00:00:00