CVE-2023-42467

Katalog CVE

CVSS 5.5 · Medium EPSS 0,42%

Kerentanan Divide By Zero pada qemu. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent s->qdev.blocksize from being 256. This stops QEMU and the guest immediately.

Rincian

Terbit di NVD

11 September 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-369: Divide By Zero

EPSS (30 hari)

0,42% peluang dieksploitasi; lebih tinggi dari 34,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gitlab.com/qemu-project/qemu/-/issues/1813 exploit · issue tracking · advisory pihak ketiga
• https://gitlab.com/qemu-project/qemu/-/commit/7cfcc79b0ab800959716738aff9419f53fc68c9c
• https://security.netapp.com/advisory/ntap-20231103-0005/