Release Date: | 2017-09-01 |
Use-after-free vulnerability in the sofree function in slirp/socket.cin QEMU (aka Quick Emulator) allows attackers to cause a denial of service (QEMU instance crash) by leveraging failure to properly clear ifq_so from pending packets.
See more information about CVE-2017-13711 from MITRE CVE dictionary and NIST NVD
NOTE: The following CVSS v2 metrics and score provided are preliminary and subject to review.
Base Score: | Base Metrics: | ||
Access Vector: | Undefined | Confidentiality Impact: | Undefined |
Access Impact: | Undefined | Integrity Impact: | Undefined |
Authentication: | Undefined | Availability Impact: | Undefined |
Platform | Errata | Release Date |
Oracle Linux version 7 (qemu) | ELSA-2018-4285 | 2018-11-20 |
Oracle Linux version 7 (qemu) | ELSA-2018-4289 | 2018-11-28 |
Oracle Linux version 7 (qemu-kvm) | ELSA-2018-0816 | 2018-04-16 |
This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team