CVE-2017-11434
25.07.2017, 18:29
The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a crafted DHCP options string.Enginsight
| Vendor | Product | Version |
|---|---|---|
| qemu | qemu | 𝑥 ≤ 2.9.1 |
| qemu | qemu | 2.10.0:rc0 |
| qemu | qemu | 2.10.0:rc1 |
| qemu | qemu | 2.10.0:rc2 |
| qemu | qemu | 2.10.0:rc3 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| qemu |
| ||||||||||||||||||||||||
| qemu-kvm |
|
Common Weakness Enumeration
References