Release Date: | 2017-08-23 |
QEMU (aka Quick Emulator), when built with the IDE disk and CD/DVD-ROMEmulator support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by flushing an empty CDROM device drive.
See more information about CVE-2017-12809 from MITRE CVE dictionary and NIST NVD
NOTE: The following CVSS v2 metrics and score provided are preliminary and subject to review.
Base Score: | Base Metrics: | ||
Access Vector: | Undefined | Confidentiality Impact: | Undefined |
Access Impact: | Undefined | Integrity Impact: | Undefined |
Authentication: | Undefined | Availability Impact: | Undefined |
Platform | Errata | Release Date |
Oracle Linux version 7 (qemu) | ELSA-2018-4285 | 2018-11-20 |
Oracle Linux version 7 (qemu) | ELSA-2018-4289 | 2018-11-28 |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team