Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:16140
HistoryMay 02, 2019 - 5:12 a.m.

Arbitrary Code Execution

2019-05-0205:12:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

QEMU is vulnerable to arbitrary code execution. The vulnerability exists through the offset or length value in savevm data.

References

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P