CVE-2017-5931
Fixed in a distro release EPSS <1%
Integer overflow in hw/virtio/virtio-crypto.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code on the host via a crafted virtio-crypto request, which triggers a heap-based buffer overflow.
Products: qemu
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | qemu | 2.8.1-r1 |
| Alpine 3.5 | qemu | 2.8.1.1-r0 |
| Alpine 3.6 | qemu | 2.8.1-r1 |
| Alpine 3.7 | qemu | 2.8.1-r1 |
| Alpine 3.8 | qemu | 2.8.1-r1 |
| Alpine 3.9 | qemu | 2.8.1-r1 |
| Debian 12 | qemu | 1:2.8+dfsg-3 |
| Debian 13 | qemu | 1:2.8+dfsg-3 |
| Debian 14 | qemu | 1:2.8+dfsg-3 |