PT-2017-1611
CVE-2015-8556
·
تاريخ النشر
2015-12-21
·
تاريخ التحديث
2017-03-27
الوصف من
CVSS 2.0
10
عاليةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
QEMU versions prior to 2.5.0-r1
Gentoo QEMU package before 2.5.0-r1
Description
The issue is caused by synchronization errors when using a shared resource in the QEMU hardware emulator. Exploitation of this issue may allow a remote attacker to cause a denial of service or elevate privileges in the guest operating system.
Recommendations
For QEMU versions prior to 2.5.0-r1, update to version 2.5.0-r1 or later to resolve the issue.
For the Gentoo QEMU package before 2.5.0-r1, update to version 2.5.0-r1 or later to resolve the issue.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾