CVE-2017-5667
- State
- Published
- Severity
- Not scored
- Published
- Mar 16, 2017
- Updated
- Aug 5, 2024
- Reserved
- Jan 31, 2017
Description
The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds heap access and crash) or execute arbitrary code on the QEMU host via vectors involving the data transfer length.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security updatemailing-list
- [oss-security] 20170130 CVE request Qemu: sd: sdhci OOB access during multi block SDMA transfermailing-list
- GLSA-201702-28vendor-advisory
- 95885vdb-entry
- [oss-security] 20170212 Re: Re: CVE request Qemu: sd: sdhci OOB access during multi block SDMA transfermailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=1417559
- [oss-security] 20170131 Re: CVE request Qemu: sd: sdhci OOB access during multi block SDMA transfermailing-list
- http://git.qemu-project.org/?p=qemu.git%3Ba=commitdiff%3Bh=42922105beb14c2fc58185ea022b9f72fb5465e9
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.