Wind River Support Network

HomeDefectsLIN1022-7501
Fixed

LIN1022-7501 : Security Advisory - qemu - CVE-2024-3447

Created: Apr 9, 2024    Updated: Dec 18, 2024
Resolved Date: Dec 18, 2024
Found In Version: 10.22.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Userspace

Description

A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of  `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.

https://nvd.nist.gov/vuln/detail/CVE-2024-3447

CVEs


Live chat
Online