DMA Reentrancy Issue in Tulip Device Emulation in QEMU
CVE-2022-2962

7.8HIGH

Key Information:

Vendor

Qemu
Status
Qemu
Vendor
CVE Published:
13 September 2022

What is CVE-2022-2962?

A DMA reentrancy vulnerability was discovered in the Tulip device emulation within QEMU. This flaw arises when the Tulip device fails to verify that the destination address during read or write operations pertains to its own MMIO address. Consequently, this oversight can trigger MMIO handlers multiple times, potentially leading to stack or heap overflows. A malicious guest could exploit this vulnerability to crash the QEMU process running on the host, which would result in a denial of service condition.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

QEMU Will be fixed in QEMU 7.2.0-rc0

References

https://gitlab.com/qemu-project/qemu/-/issues/1171
x_refsource_MISC
https://gitlab.com/qemu-project/qemu/-/commit/36a894aeb64...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.