Lucene search

K
redosRedosROS-20240625-04
HistoryJun 25, 2024 - 12:00 a.m.

ROS-20240625-04

2024-06-2500:00:00
redos.red-soft.ru
1
qemu
denial of service
buffer overflow
information leakage
vnc server
pointer dereferencing errors
hardware emulator
dma re-entry
dynamic memory
tx flushing
clientcuttext message
remote exploitation
qemu server

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.6%

A vulnerability in the e1000e component of the QEMU server is related to DMA re-entry. Exploitation of the vulnerability could
allow an attacker to cause a denial of service

A vulnerability in the register_vfs() function (hw/pci/pcie_sriov.c) of the QEMU hardware emulator is related to a
buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker to cause a
denial of service

A vulnerability in the virtio-net interface of the QEMU server is associated with TX flushing in the virtio_net_flush_tx function, if the
VIRTIO_NET_F_HASH_REPORT, VIRTIO_F_VERSION_1, and VIRTIO_NET_F_MRG_RXBUF guest functions are enabled.
Exploitation of the vulnerability could allow an attacker to cause information leakage by

A vulnerability in the qemu_clipboard_request() function of the embedded hardware emulator VNC server
QEMU is associated with pointer dereferencing errors when processing a ClientCutText message. Exploitation
of the vulnerability could allow an attacker acting remotely to cause a denial of service

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64qemu<= 7.2.12-1UNKNOWN

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.6%