PT-2014-6445 · Qemu+3 · Qemu+3
CVE-2014-5388
·
Publicado
2014-08-26
·
Atualizado
2023-02-13
CVSS v2.0
4.6
Média
| Vetor | AV:L/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
QEMU (affected versions not specified)
Description
The issue is related to an off-by-one error in the
pci read function within the ACPI PCI hotplug interface. This error can be triggered by a crafted PCI device, leading to memory corruption. As a result, local guest users may be able to obtain sensitive information and potentially have other unspecified impacts.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Qemu
Suse
Ubuntu