ALAS-2017-934 ---- qemu-kvm, qemu-imgID: oval:org.secpod.oval:def:1600817 | Date: (C)2017-12-26 (M)2024-01-29 |
Class: PATCH | Family: unix |
Quick Emulator , compiled with the PC System Emulator with multiboot feature support, is vulnerable to an OOB r/w memory access issue. The issue could occur due to an integer overflow while loading a kernel image during a guest boot. A user or process could use this flaw to potentially achieve arbitrary code execution on a host. Quick emulator , compiled with the Cirrus CLGD 54xx VGA Emulator support, is vulnerable to an OOB write access issue. The issue could occur while writing to VGA memory via mode4and5 write functions. A privileged user inside guest could use this flaw to crash the QEMU process resulting in Denial of Serivce
Platform: |
Amazon Linux AMI |