DeutschShown in its original language — a full translation is planned for a future version.
QEMU: Mehrere Schwachstellen
view advisory published 2023-08-28
Ein lokaler Angreifer kann mehrere Schwachstellen in QEMU ausnutzen, um seine Privilegien zu erhöhen, Code auszuführen oder einen Denial of Service zu verursachen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-24165US | high8.8 | — | ||
An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS). Note: This is… | ||||
| CVE-2022-36648US | critical10.0 | — | ||
The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially e… | ||||
02
references
External citations — patches, advisories, analysis.
- Qemu Security Bulletin vom 2023-08-28external
- Oracle Linux Security Advisory ELSA-2024-12435 vom 2024-06-14external
- Debian Security Advisory DLA-3604 vom 2023-10-05external
- Ubuntu Security Notice USN-6567-1 vom 2024-01-08external
- Ubuntu Security Notice USN-6567-2 vom 2024-06-06external
- WID-SEC-W-2023-2197 - CSAF Versionself
- WID-SEC-2023-2197 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan