NVD

Id
85065  
Name
CVE-2017-8284  
Description
** DISPUTED ** The disas_insn function in target/i386/translate.c in QEMU before 2.9.0, when TCG mode without hardware acceleration is used, does not limit the instruction size, which allows local users to gain privileges by creating a modified basic block that injects code into a setuid program, as demonstrated by procmail. NOTE: the vendor has stated this bug does not violate any security guarantees QEMU makes.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-05-27  
Published
2017-04-26  
Modified Date
2017-05-10  
Seq
2017-8284  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
414614 85065 CVE-2017-6864 https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf  View
414615 85065 CVE-2017-6864 https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf  View
414616 85065 CVE-2017-6864 https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
67350 JVNDB-2017-003662 QEMU の target/i386/translate.c の disas_insn 関数における権限を取得される脆弱性 ** 未確定 ** 本件は、脆弱性として確定していません。 CVE-2017-8284 0 CVE-2017-8284 85065 6.9 7 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003662.html 2017-03-24 2017-06-02 View