Denial of service vulnerability in qemu-kvm due to crafted Physical Region Descriptor Table (PRDT) dataID: oval:org.secpod.oval:def:24756 | Date: (C)2015-06-08 (M)2023-02-20 |
Class: VULNERABILITY | Family: unix |
The host is installed with qemu-kvm on RHEL 7 and is prone to a denial of service vulnerability. A flaw is present in the application, which fails to properly handle malformed Physical Region Descriptor Table (PRDT) data sent to the host's IDE and/or AHCI controller emulation. Successful exploitation could allow privileged guest user to crash the service.
Platform: |
Red Hat Enterprise Linux 7 |