2 lines
5.6 KiB
JSON
2 lines
5.6 KiB
JSON
{"affected":[{"affectedData":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"source":"cve@mitre.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*","matchCriteriaId":"A965C2D1-C447-4324-95A4-27285ECF8909","versionEndIncluding":"2.8.1.1","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:suse:linux_enterprise_desktop:12:sp1:*:*:*:*:*:*","matchCriteriaId":"3A0BA503-3F96-48DA-AF47-FBA37A9D0C48","vulnerable":true},{"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:ltss:*:*:*:*:*:*","matchCriteriaId":"D51045FB-8610-48E3-98AF-604677FCC113","vulnerable":true},{"criteria":"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*","matchCriteriaId":"2076747F-A98E-4DD9-9B52-BF1732BCAD3D","vulnerable":true},{"criteria":"cpe:2.3:o:suse:linux_enterprise_server_for_sap:12:*:*:*:*:*:*:*","matchCriteriaId":"62909921-8CC8-489E-BFBA-A28B751B182F","vulnerable":true},{"criteria":"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*","matchCriteriaId":"5A633996-2FD7-467C-BAA6-529E16BD06D1","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit."},{"lang":"es","value":"Desbordamiento de entero en la función emulated_apdu_from_guest en usb/dev-smartcard-reader.c en Quick Emulator (Qemu), cuando se construye con el soporte de emulador de dispositivo de CCID Card, permite a usuarios locales provocar una denegación de servicio (caída de aplicación) a través de una unidad Unidad de datos de protocolo (APDU) grande."}],"id":"CVE-2017-5898","lastModified":"2026-06-17T01:21:24.130","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":3.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-03-15T19:59:00.500","references":[{"source":"cve@mitre.org","url":"http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=c7dfbf322595ded4e70b626bf83158a9f3807c6a"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html"},{"source":"cve@mitre.org","tags":["Mailing List","Patch","Third Party Advisory"],"url":"http://www.openwall.com/lists/oss-security/2017/02/07/3"},{"source":"cve@mitre.org","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/96112"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2017:1856"},{"source":"cve@mitre.org","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2017:2392"},{"source":"cve@mitre.org","tags":["Issue Tracking","Patch"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419699"},{"source":"cve@mitre.org","tags":["Patch","Third Party Advisory","VDB Entry"],"url":"https://security.gentoo.org/glsa/201702-28"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=c7dfbf322595ded4e70b626bf83158a9f3807c6a"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"],"url":"http://www.openwall.com/lists/oss-security/2017/02/07/3"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/96112"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2017:1856"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://access.redhat.com/errata/RHSA-2017:2392"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1419699"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"],"url":"https://security.gentoo.org/glsa/201702-28"}],"sourceIdentifier":"cve@mitre.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-190"}],"source":"nvd@nist.gov","type":"Primary"}]}
|