REDHAT-BUG-1951118: Buffer Overflow
A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrltransferhandler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario, or potential information leakage from the host memory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1951118?
The severity of REDHAT-BUG-1951118 is critical due to the potential for a privileged guest user to exploit the heap buffer overflow.
How do I fix REDHAT-BUG-1951118?
To fix REDHAT-BUG-1951118, update QEMU to a version higher than 6.0.0.
Who is affected by REDHAT-BUG-1951118?
Users running QEMU versions up to and including 6.0.0 are affected by REDHAT-BUG-1951118.
What type of vulnerability is REDHAT-BUG-1951118?
REDHAT-BUG-1951118 is classified as a heap buffer overflow vulnerability.
Can REDHAT-BUG-1951118 be exploited remotely?
No, REDHAT-BUG-1951118 requires a local privileged guest user to exploit the vulnerability.