Veracode Vulnerability DatabaseVERACODE:18296Denial Of Service (DoS)
6.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
QEMU is vulnerable to denial of service attacks. A local attacker could cause memory exhaustion resulting in denial of service. The vulnerability exists in the Keyboard Input Event Handler component and exploitable by rapidly generating large keyboard events.
References
www.openwall.com/lists/oss-security/2017/05/03/2
www.securityfocus.com/bid/98277
access.redhat.com/errata/RHSA-2017:2408
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1459661
bugzilla.redhat.com/show_bug.cgi?id=1459663
bugzilla.redhat.com/show_bug.cgi?id=1459664
bugzilla.redhat.com/show_bug.cgi?id=1459666
bugzilla.redhat.com/show_bug.cgi?id=1459667
bugzilla.redhat.com/show_bug.cgi?id=1459668
lists.debian.org/debian-lts-announce/2018/09/msg00007.html
lists.gnu.org/archive/html/qemu-devel/2017-04/msg05599.html
security.gentoo.org/glsa/201706-03
Related
6.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C