CVE-2019-5008
Published: 19 April 2019
hw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL pointer dereference, which allows the attacker to cause a denial of service via a device driver.
From the Ubuntu Security Team
It was discovered that a NULL pointer dereference existed in the sun4u power device implementation in QEMU. A local attacker could use this to cause a denial of service.
Notes
| Author | Note |
|---|---|
| sbeattie | sun4u power device was added in commit 25c5d5acfbaa148b2da64b1f2c1401f87ebb0bb4 (v2.12) |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
qemu-kvm Launchpad, Ubuntu, Debian |
upstream |
Needs triage
|
| trusty |
Does not exist
|
|
| xenial |
Does not exist
|
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
|
qemu Launchpad, Ubuntu, Debian |
upstream |
Needs triage
|
| xenial |
Not vulnerable
(code not present)
|
|
| bionic |
Not vulnerable
(code not present)
|
|
| cosmic |
Released
(1:2.12+dfsg-3ubuntu8.7)
|
|
| disco |
Released
(1:3.1+dfsg-2ubuntu3.1)
|
|
| trusty |
Released
(2.0.0+dfsg-2ubuntu1.46)
|
|
|
Patches: upstream: https://git.qemu.org/?p=qemu.git;a=commit;h=ad280559c68360c9f1cd7be063857853759e6a73 (4.0.0-rc0) |
||
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 7.5 |
| Attack vector | Network |
| Attack complexity | Low |
| Privileges required | None |
| User interaction | None |
| Scope | Unchanged |
| Confidentiality | None |
| Integrity impact | None |
| Availability impact | High |
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |