DeutschShown in its original language — a full translation is planned for a future version.
QEMU: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2018-12-18
Ein lokaler Angreifer kann mehrere Schwachstellen in QEMU ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-20191US | high7.5 | — | ||
hw/rdma/vmw/pvrdma_main.c in QEMU does not implement a read operation (such as uar_read by analogy to uar_write), which allows attackers to cause a denial of service (NULL pointer… | ||||
| CVE-2018-20124US | medium5.5 | — | ||
hw/rdma/rdma_backend.c in QEMU allows guest OS users to trigger out-of-bounds access via a PvrdmaSqWqe ring element with a large num_sge value. | ||||
| CVE-2018-20216US | high7.5 | — | ||
QEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked (and -1 is mishandled). | ||||
| CVE-2018-20126US | medium5.5 | — | ||
hw/rdma/vmw/pvrdma_cmd.c in QEMU allows create_cq and create_qp memory leaks because errors are mishandled. | ||||
| CVE-2018-20125US | high7.5 | — | ||
hw/rdma/vmw/pvrdma_cmd.c in QEMU allows attackers to cause a denial of service (NULL pointer dereference or excessive memory allocation) in create_cq_ring or create_qp_rings. | ||||
02
references
External citations — patches, advisories, analysis.
- Oracle Linux Security Advisory ELSA-2019-4518 vom 2019-01-25external
- Oracle Linux Security Advisory ELSA-2019-4556 vom 2019-02-23external
- Oracle Linux Security Advisory ELSA-2019-4585 vom 2019-03-15external
- Oracle Linux Security Advisory ELSA-2019-4630 vom 2019-05-14external
- Mailing list OSS-Security vom 2018-12-19external
- Mailing list OSS-Security vom 2018-12-19external
- Mailing list OSS-Security vom 2018-12-19external
- Mailing list OSS-Security vom 2018-12-19external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan