Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:42156
HistoryAug 06, 2023 - 5:14 a.m.

Denial Of Service (DoS)

2023-08-0605:14:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
qemu
vulnerability
guest driver
out-of-bounds read
application crash
dos
page tables

0.001 Low

EPSS

Percentile

20.1%

qemu is vulnerable to Denial of Service (DoS) attacks. The flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and an application crash.