CVE-2017-5898: Integer Overflow
Integer overflow in the emulatedapdufromguest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit.
Other sources
Quick Emulator(Qemu) built with the CCID Card device emulator support is vulnerable to an integer overflow flaw. It could occur while passing message via command/responses packets to and from the host.
A privileged user inside guest could use this flaw to crash the Qemu process on host resulting in DoS.
Upstream patch: --------------- -> https://lists.nongnu.org/archive/html/qemu-devel/2017-02/msg01075.html
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2017/02/07/3
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/qemuto a version that resolves this vulnerability.Fixed in 2.9
Event History
Frequently Asked Questions
What is the severity of CVE-2017-5898?
CVE-2017-5898 has been classified as a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2017-5898?
To mitigate CVE-2017-5898, users should update QEMU to version 2.9 or later.
Who is affected by CVE-2017-5898?
CVE-2017-5898 affects local users of software built with the CCID Card device emulator support in QEMU versions prior to 2.9.
What type of attack is associated with CVE-2017-5898?
CVE-2017-5898 enables a local user to launch a denial of service attack by causing an application crash.
What components of QEMU are impacted by CVE-2017-5898?
CVE-2017-5898 specifically impacts the emulated_apdu_from_guest function within the usb/dev-smartcard-reader.c file.