Arbitrary Code Execution

2020-06-0203:15:00

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

5.6 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON

qemu-kvm-rhev is vulnerable to arbitrary code execution. The vulnerability exists in slirp where an out of bounds (OOB) buffer access while emulating tcp protocols in tcp_emu().

CPENameOperatorVersion
qemu-kvm-rheveq2.3.0__31.el7_2.4
qemu-kvm-rheveq2.1.2__23.el7_1.6
qemu-kvm-rheveq2.3.0__31.el7_2.10
qemu-kvm-rheveq2.9.0__16.el7_4.14
qemu-kvm-rheveq2.10.0__21.el7_5.6
qemu-kvm-rheveq2.12.0__33.el7
qemu-kvm-rheveq2.12.0__18.el7_6.7
qemu-kvm-rheveq2.1.2__23.el7_1.1
qemu-kvm-rheveq2.3.0__31.el7_2.16
qemu-kvm-rheveq2.6.0__28.el7_3.17

Name	Operator	Version
qemu-kvm-rhev	eq	2.3.0__31.el7_2.4
qemu-kvm-rhev	eq	2.1.2__23.el7_1.6
qemu-kvm-rhev	eq	2.3.0__31.el7_2.10
qemu-kvm-rhev	eq	2.9.0__16.el7_4.14
qemu-kvm-rhev	eq	2.10.0__21.el7_5.6
qemu-kvm-rhev	eq	2.12.0__33.el7
qemu-kvm-rhev	eq	2.12.0__18.el7_6.7
qemu-kvm-rhev	eq	2.1.2__23.el7_1.1
qemu-kvm-rhev	eq	2.3.0__31.el7_2.16
qemu-kvm-rhev	eq	2.6.0__28.el7_3.17