Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2018-7550 →
DEBIAN-CVE-2018-7550
The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on the QEMU host...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The load_multiboot function in hw/i386/multiboot.c in Quick Emulator (aka QEMU) allows local guest OS users to execute arbitrary code on the QEMU host via a mh_load_end_addr value greater than mh_bss_end_addr, which triggers an out-of-bounds read or write memory access.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
qemu
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.12~rc3+dfsg-1"}]}]
Debian:13
qemu
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.12~rc3+dfsg-1"}]}]
Debian:14
qemu
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.12~rc3+dfsg-1"}]}]
Références
- advisory security-tracker.debian.org