Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:44793
HistoryDec 23, 2023 - 8:17 p.m.

Denial Of Service (DOS)

2023-12-2320:17:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
denial of service
qemu
vulnerability
e1000e nic
virtual machine monitor
dma reentrancy issue

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

High

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

QEMU (virtual machine monitor) is vulnerable to Denial Of Service (DOS). The vulnerability is caused due to a DMA reentrancy issue leading to a use-after-free error found in the e1000e NIC emulation code. This can lead to a privileged guest user crash the QEMU process on the host, resulting in a Denial Of Service (DOS).

Related

oraclelinux 3
debiancve 1
ubuntucve 1
cve 1
redhat 4
nessus 16
osv 3
redhatcve 1
prion 1
alpinelinux 1
openvas 5
rocky 1
almalinux 1
oraclelinux
oraclelinux
virt:ol and virt-devel:rhel security update
2024-01-12 00:00:00
qemu-kvm security update
2024-05-02 00:00:00
virt:kvm_utils3 security update
2024-04-10 00:00:00
debiancve
debiancve
CVE-2023-3019
2023-07-24 15:19:19
ubuntucve
ubuntucve
CVE-2023-3019
2023-07-24 00:00:00
cve
cve
CVE-2023-3019
2023-07-24 15:19:19
redhat
redhat
(RHSA-2024:0135) Moderate: virt:rhel and virt-devel:rhel security update
2024-01-10 09:31:57
(RHSA-2024:0569) Moderate: virt:rhel and virt-devel:rhel security update
2024-01-30 12:53:15
(RHSA-2024:0404) Important: virt:rhel and virt-devel:rhel security update
2024-01-24 14:40:17
nessus
nessus
CentOS 8 : virt:rhel and virt-devel:rhel (CESA-2024:0135)
2024-01-10 00:00:00
RHEL 8 : virt:rhel and virt-devel:rhel (RHSA-2024:0135)
2024-01-10 00:00:00
Oracle Linux 8 : virt:ol / and / virt-devel:rhel (ELSA-2024-0135)
2024-01-13 00:00:00
osv
osv
CVE-2023-3019
2023-07-24 16:15:12
Moderate: qemu-kvm security update
2024-04-30 00:00:00
Moderate: qemu-kvm security update
2024-05-10 14:32:42
redhatcve
redhatcve
CVE-2023-3019
2023-07-12 15:35:54
prion
prion
Design/Logic Flaw
2023-07-24 16:15:00
alpinelinux
alpinelinux
CVE-2023-3019
2023-07-24 15:19:19
openvas
openvas
openSUSE: Security Advisory for qemu (SUSE-SU-2024:1438-1)
2024-04-27 00:00:00
Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2023-3082)
2023-11-01 00:00:00
openSUSE: Security Advisory for qemu (SUSE-SU-2024:1394-1)
2024-04-25 00:00:00
rocky
rocky
qemu-kvm security update
2024-05-10 14:32:42
almalinux
almalinux
Moderate: qemu-kvm security update
2024-04-30 00:00:00

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

6.8 Medium

AI Score

Confidence

High

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON
Related for VERACODE:44793
oraclelinux3debiancve1ubuntucve1cve1redhat4nessus16osv3redhatcve1prion1alpinelinux1openvas5rocky1almalinux1