NVD

Id
83236  
Name
CVE-2017-5667  
Description
The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) or execute arbitrary code on the QEMU host via vectors involving the data transfer length.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-07-18  
Published
2017-03-16  
Modified Date
2017-06-30  
Seq
2017-5667  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
408054 83236 CVE-2016-7234 20161108 Microsoft Word Memory Corrpution Code Execution Vulnerability  View
409075 83236 CVE-2016-4490 [oss-security] 20160505 Re: CVE Request: No Demangling During Analysis of Untrusted Binaries  View
409076 83236 CVE-2016-4490 https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70498  View
409077 83236 CVE-2016-4490 [oss-security] 20160505 Re: CVE Request: No Demangling During Analysis of Untrusted Binaries  View
409078 83236 CVE-2016-4490 https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70498  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65973 JVNDB-2017-002312 QEMU の hw/sd/sdhci.c の sdhci_sdma_transfer_multi_blocks 関数におけるサービス運用妨害 (DoS) の脆弱性 QEMU (別名 Quick Emulator) の hw/sd/sdhci.c の sdhci_sdma_transfer_multi_blocks 関数には、サービス運用妨害 (ヒープの境界外アクセスおよびクラッシュ) 状態にされる、または QEMU ホスト上で任意のコードを実行される脆弱性が存在します。 CVE-2017-5667 CVE-2017-5667 83236 2.1 6.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002312.html 2017-02-08 2017-04-11 View