Denial Of Service (DoS)

2019-01-1508:59:20

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

qemu-kvm is vulnerable to denial of service (DoS) attacks. The vulnerability exists through an integer overflow issue in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image.

CPENameOperatorVersion
qemu-kvmeq0.12.1.2__2.160.el6_1.3
qemu-kvmeq0.12.1.2__2.113.el6_0.6
qemu-kvmeq0.12.1.2__2.160.el6_1.9
qemu-kvmeq0.12.1.2__2.355.el6_4.1
qemu-kvmeq0.12.1.2__2.160.el6_1.6
qemu-kvmeq0.12.1.2__2.295.el6
qemu-kvmeq0.12.1.2__2.355.el6_4.5
qemu-kvmeq0.12.1.2__2.209.el6_2.4
qemu-kvmeq0.12.1.2__2.355.el6_4.6
qemu-kvmeq0.12.1.2__2.113.el6

Name	Operator	Version
qemu-kvm	eq	0.12.1.2__2.160.el6_1.3
qemu-kvm	eq	0.12.1.2__2.113.el6_0.6
qemu-kvm	eq	0.12.1.2__2.160.el6_1.9
qemu-kvm	eq	0.12.1.2__2.355.el6_4.1
qemu-kvm	eq	0.12.1.2__2.160.el6_1.6
qemu-kvm	eq	0.12.1.2__2.295.el6
qemu-kvm	eq	0.12.1.2__2.355.el6_4.5
qemu-kvm	eq	0.12.1.2__2.209.el6_2.4
qemu-kvm	eq	0.12.1.2__2.355.el6_4.6
qemu-kvm	eq	0.12.1.2__2.113.el6