CVE-2022-35414 - CERT CVE
ID CVE-2022-35414
Sažetak softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., "Bugs affecting the non-virtualization use case are not considered security bugs at this time.
Reference
CVSS
Base: 6.1
Impact: 8.5
Exploitability:3.9
Pristup
VektorSloženostAutentikacija
LOCAL LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL COMPLETE
CVSS vektor AV:L/AC:L/Au:N/C:P/I:P/A:C
Zadnje važnije ažuriranje 03-08-2024 - 10:15
Objavljeno 11-07-2022 - 02:15