9.9

CVE-2009-3616

Exploit
Multiple use-after-free vulnerabilities in vnc.c in the VNC server in QEMU 0.10.6 and earlier might allow guest OS users to execute arbitrary code on the host OS by establishing a connection from a VNC client and then (1) disconnecting during data transfer, (2) sending a message using incorrect integer data types, or (3) using the Fuzzy Screen Mode protocol, related to double free vulnerabilities.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qemu ≫ Qemu Version <= 0.10.6
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.88% 0.888
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.9 3.1 6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
nvd@nist.gov 8.5 6.8 10
AV:N/AC:M/Au:S/C:C/I:C/A:C
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

http://git.savannah.gnu.org/cgit/qemu.git/commit/?id=198a0039c5
Exploit
Broken Link
http://git.savannah.gnu.org/cgit/qemu.git/commit/?id=753b405331
Exploit
Broken Link
http://marc.info/?l=qemu-devel&m=124324043812915
Mailing List
http://rhn.redhat.com/errata/RHEA-2009-1272.html
Third Party Advisory
http://www.openwall.com/lists/oss-security/2009/10/16/5
Patch
Mailing List
http://www.openwall.com/lists/oss-security/2009/10/16/8
Patch
Mailing List
http://www.securityfocus.com/bid/36716
Third Party Advisory
Broken Link
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=501131
Patch
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=505641
Exploit
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=508567
Issue Tracking