Denial Of Service (DoS)

2019-01-1509:21:02

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

28.2%

JSON

qemu-kvm-rhev is vulnerable to denial of service (DoS) attacks. The vulnerability exists as the address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area.

CPENameOperatorVersion
qemu-kvm-rheveq2.6.0__28.el7_3.3
qemu-kvm-rheveq2.3.0__31.el7_2.16
qemu-kvm-rheveq2.3.0__31.el7_2.15
qemu-kvm-rheveq2.3.0__31.el7
qemu-kvm-rheveq2.9.0__14.el7
qemu-kvm-rheveq2.1.2__23.el7
qemu-kvm-rheveq2.1.2__23.el7_1.10
qemu-kvm-rheveq2.3.0__31.el7_2.23
qemu-kvm-rheveq2.3.0__31.el7_2.21
qemu-kvm-rheveq2.3.0__31.el7_2.19

Name	Operator	Version
qemu-kvm-rhev	eq	2.6.0__28.el7_3.3
qemu-kvm-rhev	eq	2.3.0__31.el7_2.16
qemu-kvm-rhev	eq	2.3.0__31.el7_2.15
qemu-kvm-rhev	eq	2.3.0__31.el7
qemu-kvm-rhev	eq	2.9.0__14.el7
qemu-kvm-rhev	eq	2.1.2__23.el7
qemu-kvm-rhev	eq	2.1.2__23.el7_1.10
qemu-kvm-rhev	eq	2.3.0__31.el7_2.23
qemu-kvm-rhev	eq	2.3.0__31.el7_2.21
qemu-kvm-rhev	eq	2.3.0__31.el7_2.19