The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) or execute arbitrary code on the QEMU host via vectors involving the data transfer length.
References
Configurations
History
21 Nov 2024, 03:28
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=42922105beb14c2fc58185ea022b9f72fb5465e9 - | |
| References | () http://www.openwall.com/lists/oss-security/2017/01/30/2 - Mailing List, Patch, Third Party Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2017/01/31/10 - Mailing List, Patch, Third Party Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2017/02/12/1 - Mailing List, Patch, Third Party Advisory | |
| References | () http://www.securityfocus.com/bid/95885 - Third Party Advisory, VDB Entry | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=1417559 - Issue Tracking, Patch | |
| References | () https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - Third Party Advisory | |
| References | () https://security.gentoo.org/glsa/201702-28 - Third Party Advisory |
Information
Published : 2017-03-16 15:59
Updated : 2024-11-21 03:28
NVD link : CVE-2017-5667
Mitre link : CVE-2017-5667
CVE.ORG link : CVE-2017-5667
JSON object : View
Products Affected
debian
- debian_linux
qemu
- qemu
CWE
CWE-125
Out-of-bounds Read