Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Mar 15, 2017 |
| Centos_linux | — | Upgrade qemu-kvm-debuginfoUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm-tools | Aug 28, 2019 | Mar 15, 2017 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Feb 27, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 15, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Nov 30, 2017 | Mar 15, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Nov 30, 2017 | Mar 15, 2017 |
| Oracle_linux | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-img | Aug 8, 2017 | Feb 3, 2017 |
| Redhat_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-kvm | Aug 5, 2017 | Feb 27, 2017 |
| Suse | — | Upgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-seabiosUpgrade qemu-s390xUpgrade qemu-guest-agentUpgrade qemu-audio-spiceUpgrade qemu-skibootUpgrade qemu-langUpgrade qemu-s390Upgrade qemu-chardev-baumUpgrade qemu-armUpgrade xen-doc-htmlUpgrade qemu-ipxeUpgrade qemu-hw-display-qxlUpgrade xen-kmp-paeUpgrade qemuUpgrade qemu-block-sshUpgrade xen-kmp-defaultUpgrade qemu-block-rbdUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-chardev-spiceUpgrade kvmUpgrade xen-libs-32bitUpgrade xen-libsUpgrade xen-toolsUpgrade qemu-ui-spice-appUpgrade xen-doc-pdfUpgrade qemu-ui-cursesUpgrade qemu-x86Upgrade qemu-ppcUpgrade qemu-ui-spice-coreUpgrade qemu-audio-paUpgrade qemu-vgabiosUpgrade qemu-microvmUpgrade xen-develUpgrade qemu-block-iscsiUpgrade xen-tools-domUUpgrade qemu-audio-ossUpgrade xenUpgrade qemu-ui-gtkUpgrade qemu-toolsUpgrade qemu-ksmUpgrade qemu-sgabiosUpgrade qemu-audio-alsaUpgrade qemu-block-curlUpgrade qemu-hw-usb-redirectUpgrade qemu-kvmUpgrade qemu-hw-display-virtio-gpu-pci | Mar 1, 2017 | Feb 27, 2017 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-ppc | Apr 21, 2017 | Feb 27, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub