CVE-2024-24474
QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because of an underflow of async_len.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2024-24474 qemu Corrigé dans: 1:7.2+dfsg-7+deb12u3
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- patch github.com
- report gitlab.com
- web gist.github.com