CVE-2022-0216
A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the host, resulting in a denial of service.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-0216 qemu Corrigé dans: 1:5.2+dfsg-11+deb11u3
Références
- advisory github.com
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- advisory starlabs.sg
- patch gitlab.com
- report bugzilla.redhat.com
- report gitlab.com
- web access.redhat.com