CVE-2017-10806

Related Files

Ubuntu Security Notice USN-3414-2

Posted Sep 20, 2017

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3414-2 - USN-3414-1 fixed vulnerabilities in QEMU. The patch backport for CVE-2017-9375 was incomplete and caused a regression in the USB xHCI controller emulation support. This update fixes the problem. Leo Gaspard discovered that QEMU incorrectly handled VirtFS access control. A guest attacker could use this issue to elevate privileges inside the guest. Li Qiang discovered that QEMU incorrectly handled VMWare PVSCSI emulation. A privileged attacker inside the guest could use this issue to cause QEMU to consume resources or crash, resulting in a denial of service. Various other issues were also addressed.

tags | advisory, denial of service, vulnerability

systems | linux, ubuntu

advisories | CVE-2017-10664, CVE-2017-10806, CVE-2017-10911, CVE-2017-11434, CVE-2017-12809, CVE-2017-7493, CVE-2017-8112, CVE-2017-8380, CVE-2017-9060, CVE-2017-9310, CVE-2017-9330, CVE-2017-9373, CVE-2017-9374, CVE-2017-9375, CVE-2017-9503, CVE-2017-9524

MD5 | 92172bfdd6366a35c975fa4e430d2218

Download | Favorite | Comments (0)

Ubuntu Security Notice USN-3414-1

Posted Sep 14, 2017

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 3414-1 - Leo Gaspard discovered that QEMU incorrectly handled VirtFS access control. A guest attacker could use this issue to elevate privileges inside the guest. Li Qiang discovered that QEMU incorrectly handled VMWare PVSCSI emulation. A privileged attacker inside the guest could use this issue to cause QEMU to consume resources or crash, resulting in a denial of service. Various other issues were also addressed.

tags | advisory, denial of service

systems | linux, ubuntu

advisories | CVE-2017-10664, CVE-2017-10806, CVE-2017-10911, CVE-2017-11434, CVE-2017-12809, CVE-2017-7493, CVE-2017-8112, CVE-2017-8380, CVE-2017-9060, CVE-2017-9310, CVE-2017-9330, CVE-2017-9373, CVE-2017-9374, CVE-2017-9375, CVE-2017-9503, CVE-2017-9524

MD5 | 0392d6964c9f9ee67e40b47efe84d6b0

Download | Favorite | Comments (0)

Debian Security Advisory 3925-1

Posted Aug 6, 2017

Authored by Debian | Site debian.org

Debian Linux Security Advisory 3925-1 - Multiple vulnerabilities were found in qemu, a fast processor emulator.

tags | advisory, vulnerability

systems | linux, debian

advisories | CVE-2017-10806, CVE-2017-11334, CVE-2017-11443, CVE-2017-9524

MD5 | 891c5fec85e89b062c30730376dc45e2

Download | Favorite | Comments (0)