Ubuntu.comUB:CVE-2022-36648CVE-2022-36648
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
58.9%
DISPUTED The hardware emulation in the of_dpa_cmd_add_l2_flood of
rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote
attackers to crash the host qemu and potentially execute code on the host
via execute a malformed program in the guest OS. Note: This has been
disputed by multiple third parties as not a valid vulnerability due to the
rocker device not falling within the virtualization use case.
Bugs
Notes
| Author | Note |
|---|---|
| mdeslaur | As of 2024-06-17, this CVE has been disputed, marking as not-affected |
Related
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
58.9%