Buffer Overflow

2024-02-2614:34:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

qemu

buffer overflow

integer underflow

esp_do_nodma

ti command

non-dma transfer

fifo data

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.5%

JSON

QEMU is vulnerable to Buffer Overflow. The vulnerability is due to an integer underflow, resulting in a buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because of an underflow of async_len.

CPENameOperatorVersion
qemu:sideq1:5.1+dfsg-4
qemu:sideq1:5.1+dfsg-4+b1
qemu:sideq1:5.1+dfsg-4+b2
qemu:sideq1:5.1+dfsg-4
qemu:sideq1:5.1+dfsg-4+b1
qemu:sideq1:5.1+dfsg-4+b2