CVE-2017-5898
- State
- Published
- Severity
- Not scored
- Published
- Mar 15, 2017
- Updated
- Aug 5, 2024
- Reserved
- Feb 7, 2017
Description
Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- SUSE-SU-2017:0582vendor-advisory
- [oss-security] 20170207 Re: CVE request Qemu: usb: integer overflow in emulated_apdu_from_guestmailing-list
- RHSA-2017:2392vendor-advisory
- GLSA-201702-28vendor-advisory
- SUSE-SU-2017:0570vendor-advisory
- 96112vdb-entry
- http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=c7dfbf322595ded4e70b626bf83158a9f3807c6a
- https://bugzilla.redhat.com/show_bug.cgi?id=1419699
- RHSA-2017:1856vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.