跳转到帖子

Ubuntu: (CVE-2024-3447): qemu vulnerability

recommended_posts

发布于
  • Members

Ubuntu: (CVE-2024-3447): qemu vulnerability

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
11/14/2024
Created
11/21/2024
Added
11/19/2024
Modified
01/23/2025

Description

A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of`s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.

Solution(s)

  • ubuntu-upgrade-qemu

References

  • https://attackerkb.com/topics/cve-2024-3447
  • CVE - 2024-3447
  • https://patchew.org/QEMU/[email protected]/
  • https://patchew.org/QEMU/[email protected]/
  • https://www.cve.org/CVERecord?id=CVE-2024-3447
  • 查看数 695
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…