DeutschShown in its original language — a full translation is planned for a future version.
QEMU: Schwachstelle ermöglicht Denial of Service und Codeausführung
view advisory published 2022-05-16
Ein lokaler Angreifer kann eine Schwachstelle in QEMU ausnutzen, um einen Denial of Service herbeizuführen und potenziell um beliebigen Programmcode auszuführen.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-3750US | high8.2 | — | ||
A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB pa… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2022:7967 vom 2022-11-15external
- Red Hat Security Advisory RHSA-2023:6368 vom 2023-11-07external
- Red Hat Security Advisory RHSA-2023:6980 vom 2023-11-15external
- Red Hat Security Advisory RHSA-2024:0404 vom 2024-01-25external
- Red Hat Security Advisory RHSA-2024:0569 vom 2024-01-30external
- Rocky Linux Security Advisory RLSA-2023:6980 vom 2026-03-18external
- inTheWild CVE-2021-3750 vom 2022-05-16external
- Oracle Linux Security Advisory ELSA-2022-7967 vom 2022-11-22external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan