【OCS】【漏洞修复】CVE-2024-3446：qemu中危漏洞

<div>
 <div class="document">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【软件包名】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">qemu<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;"> 
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【CVE ID】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">CVE-2024-3446<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;"> 
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【漏洞评级】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">Medium<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;"> 
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【评分向量】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;"> 
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【CWE ID】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">CWE-415<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;"> 
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【漏洞描述】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues. This issue could allow a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or allow arbitrary code execution within the context of the QEMU process on the host.<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-weight: 400; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;"> 
 <span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">【参考链接】<span style="font-size: 14.63px; font-family: Helvetica Neue,Helvetica,PingFang SC,Microsoft YaHei,Source Han Sans SC,Noto Sans CJK SC,WenQuanYi Micro Hei,sans-serif; font-style: normal; text-decoration: 333333; background: transparent; letter-spacing: 0.00px; vertical-align: baseline;">
 
 </div>
 </div>

OpenCloudOS Stream/qemu

内容风险标识

评论 (0)

OpenCloudOS Stream/qemu .gitee-modal { width: 500px !important; }

内容风险标识