Orta CVSS 5.5 PoC var
CVE-2024-3567: Qemu: güvenlik açığı
Açıklama (NVD)
A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in hw/net/net_tx_pkt.c when trying to calculate the checksum of a short-sized fragmented packet. This flaw allows a malicious guest to crash QEMU and cause a denial of service condition.
Özet bilgiler
- Ürün
- Qemu Qemu
- CVSS v3.1
- 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,45 (yüzdelik 39)
- CWE
- CWE-617
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| qemu-qemu | 8.1.0 | — | 8.2.3 |
| qemu-qemu | 9.0.0 | 9.0.0 | — |
| qemu-qemu | 9.0.0 | 9.0.0 | — |
| qemu-qemu | 9.0.0 | 9.0.0 | — |
| redhat-enterprise-linux | 9.0 | 9.0 | — |