CVE-2017-6505 in QEMU

सारांश

द्वारा MITRE

The ohci_service_ed_list function in hw/usb/hcd-ohci.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• आरक्षित करना: 06/03/2017
• प्रकटीकरण: 15/03/2017
• संयम: स्वीकृत
• प्रविष्टि: VDB-98170
• CPE: तैयार
• CWE: CWE-20 (पुष्टि की गई)
• CVSS: 6.5 (NVD)
• EPSS: 0.00384
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Pharma, Police, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-6505
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-6505
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-6505/