CVE-2024-24474

Katalog CVE

CVSS 8.8 · High EPSS 1,4%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada qemu. Skor CVSS 3.1 8.8 (High) menurut CISA ADP.

Deskripsi (NVD)

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in esp_do_nodma in hw/scsi/esp.c because of an underflow of async_len.

Rincian

Terbit di NVD

20 Februari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-191: Integer Underflow (Wrap or Wraparound)

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 71,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gitlab.com/qemu-project/qemu/-/issues/1810 exploit · issue tracking · advisory vendor
• https://github.com/qemu/qemu/commit/77668e4b9bca03a856c27ba899a2513ddf52bb52 patch
• https://gist.github.com/1047524396/5ce07b9d387095c276b1cd234ae5615e advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20240510-0012/ advisory pihak ketiga