La funzione pnv_lpc_do_eccb in hw / ppc / pnv_lpc.c in Qemu prima 3.1 consente fuori dal campo scrittura o lettura alla memoria PowerNV. |
http://www.securityfocus.com/bid/105920 https://seclists.org/bugtraq/2019/May/76 https://www.debian.org/security/2019/dsa-4454 https://lists.gnu.org/archive/html/qemu-devel/2018-11/msg00446.html http://www.openwall.com/lists/oss-security/2018/11/06/6 http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html https://usn.ubuntu.com/3826-1/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18954 |
Vulnerabilità: CVE-2018-18954
