CVE-2017-11334
Description
The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area.
Risk Information
Base Score
4.4
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.04
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple Vulnerabilities are affected in QEMU 2.5.0 | Windows |
| Machine emulator and virtualizer (USN-3289-1) qemu-system-arm_2.0.0+dfsg-2ubuntu1.40_i386.deb | Linux |
| Machine emulator and virtualizer (USN-3289-1) qemu-system-arm_2.0.0+dfsg-2ubuntu1.40_amd64.deb | Linux |
| Machine emulator and virtualizer (USN-3289-1) qemu-system-ppc_2.0.0+dfsg-2ubuntu1.40_i386.deb | Linux |
| Machine emulator and virtualizer (USN-3289-1) qemu-system-ppc_2.0.0+dfsg-2ubuntu1.40_amd64.deb | Linux |
| Machine emulator and virtualizer (USN-3289-1) qemu-system-mips_2.0.0+dfsg-2ubuntu1.40_i386.deb | Linux |
| Machine emulator and virtualizer (USN-3289-1) qemu-system-mips_2.0.0+dfsg-2ubuntu1.40_amd64.deb | Linux |
| Machine emulator and virtualizer (USN-3289-1) qemu-system-misc_2.0.0+dfsg-2ubuntu1.40_i386.deb | Linux |
| Machine emulator and virtualizer (USN-3289-1) qemu-system-misc_2.0.0+dfsg-2ubuntu1.40_amd64.deb | Linux |
| Machine emulator and virtualizer (USN-3289-1) qemu-system-sparc_2.0.0+dfsg-2ubuntu1.40_i386.deb | Linux |
| Machine emulator and virtualizer (USN-3289-1) qemu-system-sparc_2.0.0+dfsg-2ubuntu1.40_amd64.deb | Linux |
| Machine emulator and virtualizer (USN-3575-1) qemu_2.10+dfsg-0ubuntu3.5_i386.deb | Linux |
| Machine emulator and virtualizer (USN-3575-1) qemu_2.10+dfsg-0ubuntu3.5_amd64.deb | Linux |
| Machine emulator and virtualizer (USN-3575-1) qemu-system_2.0.0+dfsg-2ubuntu1.40_i386.deb | Linux |
| Machine emulator and virtualizer (USN-3575-1) qemu-system_2.0.0+dfsg-2ubuntu1.40_amd64.deb | Linux |
| Machine emulator and virtualizer (USN-3575-1) qemu-system_2.10+dfsg-0ubuntu3.5_i386.deb | Linux |
| Machine emulator and virtualizer (USN-3575-1) qemu-system_2.10+dfsg-0ubuntu3.5_amd64.deb | Linux |
| Machine emulator and virtualizer (USN-3575-1) qemu-system-arm_2.0.0+dfsg-2ubuntu1.40_i386.deb | Linux |
| Machine emulator and virtualizer (USN-3575-1) qemu-system-arm_2.0.0+dfsg-2ubuntu1.40_amd64.deb | Linux |
| Machine emulator and virtualizer (USN-3575-1) qemu-system-ppc_2.0.0+dfsg-2ubuntu1.40_i386.deb | Linux |
| Machine emulator and virtualizer (USN-3575-1) qemu-system-ppc_2.0.0+dfsg-2ubuntu1.40_amd64.deb | Linux |
| Machine emulator and virtualizer (USN-3575-1) qemu-system-x86_2.0.0+dfsg-2ubuntu1.40_i386.deb | Linux |
| Machine emulator and virtualizer (USN-3575-1) qemu-system-x86_2.0.0+dfsg-2ubuntu1.40_amd64.deb | Linux |
| Machine emulator and virtualizer (USN-3575-1) qemu-system-mips_2.0.0+dfsg-2ubuntu1.40_i386.deb | Linux |
| Machine emulator and virtualizer (USN-3575-1) qemu-system-mips_2.0.0+dfsg-2ubuntu1.40_amd64.deb | Linux |
| Machine emulator and virtualizer (USN-3575-1) qemu-system-sparc_2.0.0+dfsg-2ubuntu1.40_i386.deb | Linux |
| Machine emulator and virtualizer (USN-3575-1) qemu-system-sparc_2.0.0+dfsg-2ubuntu1.40_amd64.deb | Linux |
| Qemu 1:2.8+dfsg-6 for Debian GNU/Linux 9 (Stretch) qemu_2.8+dfsg-6_i386.deb | Linux |
| Qemu 1:2.8+dfsg-6 for Debian GNU/Linux 9 (Stretch) (x64) qemu_2.8+dfsg-6_amd64.deb | Linux |
| qemu security update(DSA-3925-1) qemu_2.8+dfsg-6_i386.deb | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234