CVE-2017-5667
First published: Mon Jan 30 2017(Updated: )
Quick emulator(Qemu) built with the SDHCI device emulation support is vulnerable to an OOB heap access issue. It could occur while doing a multi block SDMA transfer via sdhci_sdma_transfer_multi_blocks routine. A privileged user inside guest could use this flaw to crash the Qemu process resulting in DoS or potentially execute arbitrary code with privileges of the Qemu process on the host. Upstream patch: --------------- -> <a href="https://lists.gnu.org/archive/html/qemu-devel/2017-01/msg06191.html">https://lists.gnu.org/archive/html/qemu-devel/2017-01/msg06191.html</a> Reference: ---------- -> <a href="http://www.openwall.com/lists/oss-security/2017/01/30/2">http://www.openwall.com/lists/oss-security/2017/01/30/2</a>
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| QEMU KVM | <=2.8.1.1 | |
| Debian Debian Linux | =8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://lists.gnu.org/archive/html/qemu-devel/2017-01/msg06191.html
- http://www.openwall.com/lists/oss-security/2017/01/30/2
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1417560
- https://bugzilla.redhat.com/show_bug.cgi?id=1417559
- http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=42922105beb14c2fc58185ea022b9f72fb5465e9
- http://www.openwall.com/lists/oss-security/2017/01/31/10
- http://www.openwall.com/lists/oss-security/2017/02/12/1
- http://www.securityfocus.com/bid/95885
- https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
- https://security.gentoo.org/glsa/201702-28
- collector/redhat-bugzilla
- alias/CVE-2017-5667
- agent/severity
- agent/weakness
- agent/author
- agent/references
- agent/type
- agent/event
- agent/description
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/qemu
- canonical/qemu kvm
- version/qemu kvm/2.8.1.1
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/8.0