Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping packets during a bulk transfer from a SPICE client due to the packet queue being full. A malicious SPICE client could use this flaw to make QEMU call free() with faked heap chunk metadata, resulting in a crash of QEMU or potential code execution with the privileges of the QEMU process on the host.
CVSS Information
N/A
Vulnerability Type
对无效指针或索引的释放
Vulnerability Title
QEMU 安全漏洞
Vulnerability Description
QEMU（Quick Emulator）是法国法布里斯-贝拉（Fabrice Bellard）个人开发者的一套模拟处理器软件。该软件具有速度快、跨平台等特点。 QEMU 存在安全漏洞，该漏洞源于在6.1.0-rc2之前版本的QEMU的USB重定向设备模拟中发现了一个缺陷，在从SPICE客户机进行批量传输期间，由于包队列已满而丢弃包时，就会发生这种情况。攻击者可利用该漏洞使QEMU call free()带有伪造的堆块元数据，从而导致QEMU崩溃或可能使用主机上QEMU进程的特权执行代码。
CVSS Information
N/A
Vulnerability Type
N/A