Lucene search
Veracode Vulnerability DatabaseVERACODE:27157HistorySep 21, 2020 - 6:39 a.m.
Privilege Escalation
2020-09-2106:39:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
privilege escalation
qemu
xenial
denial of service
sdhci
multi block transfer
EPSS
0.001
Percentile
26.7%
qemu:xenial is vulnerable to privilege escalation. The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors involving the transfer mode register during multi block transfer.
References
git.qemu-project.org/?p=qemu.git;a=commit;h=6e86d90352adf6cb08295255220295cf23c4286e
www.openwall.com/lists/oss-security/2017/02/14/8
www.securityfocus.com/bid/96263
bugzilla.redhat.com/show_bug.cgi?id=1421995
lists.debian.org/debian-lts-announce/2018/09/msg00007.html
lists.gnu.org/archive/html/qemu-devel/2017-02/msg02776.html
security.gentoo.org/glsa/201704-01
Related
ubuntucve
ubuntucve
CVE-2017-5987
2017-03-20 00:00:00
debiancve
debiancve
CVE-2017-5987
2017-03-20 16:59:02
redhatcve
redhatcve
CVE-2017-5987
2017-02-14 17:48:09
cvelist
cvelist
CVE-2017-5987
2017-03-20 16:00:00
cve
cve
CVE-2017-5987
2017-03-20 16:59:02
prion
prion
Code injection
2017-03-20 16:59:00
osv
osv
CVE-2017-5987
2017-03-20 16:59:02
qemu - security update
2018-09-06 00:00:00
nvd
nvd
CVE-2017-5987
2017-03-20 16:59:02
nessus
nessus
GLSA-201704-01 : QEMU: Multiple vulnerabilities
2017-04-11 00:00:00
EulerOS Virtualization for ARM 64 3.0.2.0 : qemu-kvm (EulerOS-SA-2020-1266)
2020-03-13 00:00:00
Ubuntu 17.04 : qemu vulnerabilities (USN-3268-1)
2017-04-26 00:00:00
gentoo
gentoo
QEMU: Multiple vulnerabilities
2017-04-10 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2020-1266)
2020-03-13 00:00:00
Ubuntu: Security Advisory (USN-3268-1)
2017-04-26 00:00:00
Fedora Update for qemu FEDORA-2017-62ac1230f7
2017-03-22 00:00:00
ubuntu
ubuntu
QEMU vulnerabilities
2017-04-25 00:00:00
QEMU vulnerabilities
2017-04-20 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: qemu-2.6.2-7.fc24
2017-03-21 16:52:35
[SECURITY] Fedora 25 Update: qemu-2.7.1-4.fc25
2017-03-18 20:00:53
suse
suse
Security update for qemu (important)
2017-07-04 21:16:50
Security update for qemu (important)
2017-07-15 00:10:54
Security update for qemu (important)
2017-11-10 09:19:55
debian
debian
[SECURITY] [DLA 1497-1] qemu security update
2018-09-06 18:49:12