Information Disclosure

🗓️ 02 May 2019 06:36:18Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 25 Views

QEMU vulnerability in patch_instruction function allows local attacker to access sensitive host stack memor

Reporter	Title	Published	Views	Family All 118
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in qemu affect PowerKVM	18 Jun 201801:33	–	ibm
Tenable Nessus	CentOS 7 : qemu-kvm (CESA-2017:1856)	25 Aug 201700:00	–	nessus
Tenable Nessus	Debian DLA-1599-1 : qemu security update	1 Dec 201800:00	–	nessus
Tenable Nessus	Debian DLA-573-1 : qemu security update	1 Aug 201600:00	–	nessus
Tenable Nessus	Debian DLA-574-1 : qemu-kvm security update	12 Jul 201600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP1 : qemu-kvm (EulerOS-SA-2017-1223)	11 Sep 201700:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : qemu-kvm (EulerOS-SA-2017-1224)	11 Sep 201700:00	–	nessus
Tenable Nessus	Fedora 23 : 2:qemu (2016-07eca37ea0)	14 Jul 201600:00	–	nessus
Tenable Nessus	Fedora 22 : 2:qemu (2016-d3a56228f5)	14 Jul 201600:00	–	nessus
Tenable Nessus	Fedora 24 : 2:qemu (2016-f13ea849c5)	14 Jul 201600:00	–	nessus

Vulners

Node

qemu-kvm-rhev qemu-kvm-rhevMatch2.3.0_31.el7_2.23

qemu-kvm-rhev qemu-kvm-rhevMatch2.1.2_23.el7_1.4

qemu-kvm-rhev qemu-kvm-rhevMatch2.1.2_23.el7_1.1

qemu-kvm-rhev qemu-kvm-rhevMatch2.1.2_23.el7_1.3

qemu-kvm-rhev qemu-kvm-rhevMatch2.1.2_23.el7_1.2

qemu-kvm-rhev qemu-kvm-rhevMatch2.3.0_31.el7_2.15

qemu-kvm-rhev qemu-kvm-rhevMatch2.6.0_28.el7_3.3

qemu-kvm-rhev qemu-kvm-rhevMatch2.1.2_23.el7_1.10

qemu-kvm-rhev qemu-kvm-rhevMatch1.5.3_60.el7_0.7

qemu-kvm-rhev qemu-kvm-rhevMatch2.3.0_31.el7_2.21

qemu-kvm-rhev qemu-kvm-rhevMatch2.9.0_10.el7

qemu-kvm-rhev qemu-kvm-rhevMatch2.1.2_23.el7_1.8

qemu-kvm-rhev qemu-kvm-rhevMatch1.5.3_60.el7_0.11

qemu-kvm-rhev qemu-kvm-rhevMatch2.6.0_28.el7_3.9

qemu-kvm-rhev qemu-kvm-rhevMatch2.3.0_31.el7_2.16

qemu-kvm-rhev qemu-kvm-rhevMatch2.3.0_31.el7_2.12

qemu-kvm-rhev qemu-kvm-rhevMatch2.6.0_27.el7

qemu-kvm-rhev qemu-kvm-rhevMatch2.3.0_31.el7_2.4

qemu-kvm-rhev qemu-kvm-rhevMatch2.1.2_23.el7

qemu-kvm-rhev qemu-kvm-rhevMatch2.6.0_28.el7_3.6

qemu-kvm-rhev qemu-kvm-rhevMatch2.3.0_31.el7_2.3

qemu-kvm-rhev qemu-kvm-rhevMatch2.3.0_31.el7_2.10

qemu-kvm-rhev qemu-kvm-rhevMatch2.1.2_23.el7_1.9

qemu-kvm-rhev qemu-kvm-rhevMatch2.3.0_31.el7_2.7

qemu-kvm-rhev qemu-kvm-rhevMatch1.5.3_60.el7_0.10

qemu-kvm-rhev qemu-kvm-rhevMatch2.3.0_31.el7

qemu-kvm-rhev qemu-kvm-rhevMatch2.1.2_23.el7_1.6

qemu-kvm-rhev qemu-kvm-rhevMatch1.5.3_60.el7ev_0.2

qemu-kvm-rhev qemu-kvm-rhevMatch2.1.2_23.el7_1.11

qemu-kvm-rhev qemu-kvm-rhevMatch2.3.0_31.el7_2.19

qemu-kvm-rhev qemu-kvm-rhevMatch2.6.0_28.el7_3.10

qemu-kvm-rhev qemu-kvm-rhevMatch2.3.0_31.el7_2.13

qemu-kvm-rhev qemu-kvm-rhevMatch2.6.0_28.el7_3.12

qemu-kvm-rhev qemu-kvm-rhevMatch2.6.0_28.el7_3.15

qemu-kvm-rhev qemu-kvm-rhevMatch2.6.0_28.el7_3.17

Source	Link
securityfocus	www.securityfocus.com/bid/86067
lists	www.lists.debian.org/debian-lts-announce/2018/11/msg00038.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

13 Feb 2023 07:15Current

5.9Medium risk

Vulners AI Score5.9

CVSS 22.1

CVSS 3.16.5

EPSS0.00085