NVD

Id
11863  
Name
CVE-2010-0297  
Description
Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS users to cause a denial of service (guest OS crash or hang) or possibly execute arbitrary code on the host OS via a crafted USB packet.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-02-12  
Modified Date
2010-08-21  
Seq
2010-0297  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
65414 11863 CVE-2010-0297 http://git.savannah.gnu.org/cgit/qemu.git/commit/?id=babd03fde68093482528010a5435c14ce9128e3f  View
65415 11863 CVE-2010-0297 [oss-security] 20100202 KVM possible security issues fixed  View
65416 11863 CVE-2010-0297 [oss-security] 20100204 Re: KVM possible security issues fixed  View
65417 11863 CVE-2010-0297 oval:org.mitre.oval:def:11786  View
65418 11863 CVE-2010-0297 http://wiki.qemu.org/ChangeLog  View
65419 11863 CVE-2010-0297 [kvm] 20090702 KVM crashes when using certain USB device  View
65420 11863 CVE-2010-0297 [kvm] 20090721 Re: KVM crashes when using certain USB device  View
65421 11863 CVE-2010-0297 [kvm] 20090721 Re: KVM crashes when using certain USB device  View
65422 11863 CVE-2010-0297 38158  View
65423 11863 CVE-2010-0297 kernel-usb-bo(56194)  View
65424 11863 CVE-2010-0297 https://bugzilla.redhat.com/show_bug.cgi?id=557025  View
65425 11863 CVE-2010-0297 RHSA-2010:0088  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35335 JVNDB-2010-001115 QEMU の usb_host_handle_control 関数におけるバッファオーバーフローの脆弱性 QEMU の USB パススルー処理実装の usb_host_handle_control 関数には、サービス運用妨害 (DoS) 状態となる、またはホスト OS 上で任意のコードを実行される脆弱性が存在します。 CVE-2010-0297 42877 CVE-2010-0297 11863 4.4 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001115.html 2010-02-09 2010-03-16 View