QEMU CVE-2017-9503 Denial of Service Vulnerability
BID:99010
CVE-2017-9503 |Info
QEMU CVE-2017-9503 Denial of Service Vulnerability
| Bugtraq ID: | 99010 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2017-9503 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 08 2017 12:00AM |
| Updated: | Jul 17 2017 10:07AM |
| Credit: | Zhangyanyu |
| Vulnerable: |
QEMU QEMU 0 openSUSE Leap 42.2 |
| Not Vulnerable: | |
Discussion
QEMU CVE-2017-9503 Denial of Service Vulnerability
QEMU is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to crash the QEMU instance, resulting in a denial-of-service condition.
QEMU is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to crash the QEMU instance, resulting in a denial-of-service condition.
Exploit / POC
QEMU CVE-2017-9503 Denial of Service Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
QEMU CVE-2017-9503 Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
QEMU CVE-2017-9503 Denial of Service Vulnerability
References:
References:
- CVE-2017-9503 (Red Hat)
- CVE-2017-9503 Qemu: scsi: null pointer dereference while processing megasas com (Seclists.org)
- [Qemu-devel] [PATCH 4/7] megasas: do not read DCMD opcode more than once (Qemu)
- [Qemu-devel] [PATCH 7/7] megasas: always store SCSIRequest* into Megasas (Qemu)
- QEMU Homepage (QEMU)
- Bug 1459477 - (CVE-2017-9503) CVE-2017-9503 Qemu: scsi: megasas: null pointer d (Red Hat)