Lucene search

K
redosRedosROS-20240611-14
HistoryJun 11, 2024 - 12:00 a.m.

ROS-20240611-14

2024-06-1100:00:00
redos.red-soft.ru
1
qemu
hardware emulator
usb xhci controller
infinite loop error
buffer overflow
9pfs
prohibition
buffer boundaries
denial of service
exploitation
unix

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.2%

The QEMU hardware emulator vulnerability is related to an infinite loop error in QEMU emulation of a
USB xHCI controller when calculating the length of the transfer request block (TRB) ring. Exploitation of the vulnerability
could allow an attacker to cause a denial of service

A vulnerability in the ati_2d_blt() function of the QEMU hardware emulator is caused by a buffer overflow in the
dynamic memory. Exploitation of the vulnerability could allow an attacker to cause a denial of service

A vulnerability in the 9p pass-through file system (9pfs) of the QEMU hardware emulator is related to
Lack of prohibition to open special files on the host side. Exploitation of the vulnerability could
allow an attacker to exploit the vulnerability, Exploitation of the vulnerability could allow an attacker to bypass existing policy
access restrictions

A vulnerability in the QEMU hardware emulator is related to an operation exceeding buffer boundaries in memory.
Exploitation of the vulnerability could allow an attacker to cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64qemu<= 7.2.7-1UNKNOWN

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.2%