Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:23978
HistoryApr 10, 2020 - 12:42 a.m.

Arbitrary Code Execution

2020-04-1000:42:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

7.4 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:S/C:C/I:C/A:C

kvm is vulnerable to arbirary code execution. Gust OS users are able to read and write arbitrary QEMU memory by modifying the address used by Cairo for memory mappings.

7.4 High

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:S/C:C/I:C/A:C