NVD Vulnerability Detail

CVE-2017-5987

Summary	The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors involving the transfer mode register during multi block transfer.
Publication Date	March 21, 2017, 1:59 a.m.
Registration Date	Jan. 26, 2021, 1:26 p.m.
Last Update	Nov. 21, 2024, 12:28 p.m.

Affected software configurations

Configuration2		or higher	or less	more than	less than
cpe:2.3:o:debian:debian_linux:8.0:::::::*

Related information, measures and tools

No	URL	タグ
1	http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=6e86d90352adf6cb08295255220295cf23c4286e
2	http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=6e86d90352adf6cb08295255220295cf23c4286e
3	http://www.openwall.com/lists/oss-security/2017/02/14/8	Mailing List Patch Third Party Advisory
4	http://www.openwall.com/lists/oss-security/2017/02/14/8	Mailing List Patch Third Party Advisory
5	http://www.securityfocus.com/bid/96263	Third Party Advisory VDB Entry
6	http://www.securityfocus.com/bid/96263	Third Party Advisory VDB Entry
7	https://bugzilla.redhat.com/show_bug.cgi?id=1421995	Issue Tracking Third Party Advisory
8	https://bugzilla.redhat.com/show_bug.cgi?id=1421995	Issue Tracking Third Party Advisory
9	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	Third Party Advisory
10	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	Third Party Advisory
11	https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg02776.html	Patch Vendor Advisory
12	https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg02776.html	Patch Vendor Advisory
13	https://security.gentoo.org/glsa/201704-01	Third Party Advisory
14	https://security.gentoo.org/glsa/201704-01	Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-835	無限ループ	https://cwe.mitre.org/data/definitions/835.html

JVN Vulnerability Information

QEMU の hw/sd/sdhci.c の sdhci_sdma_transfer_multi_blocks 関数におけるサービス運用妨害 (DoS) の脆弱性

Title	QEMU の hw/sd/sdhci.c の sdhci_sdma_transfer_multi_blocks 関数におけるサービス運用妨害 (DoS) の脆弱性
Summary	QEMU (別名 Quick Emulator) の hw/sd/sdhci.c の sdhci_sdma_transfer_multi_blocks 関数には、サービス運用妨害 (無限ループおよび QEMU プロセスクラッシュ) 状態にされる脆弱性が存在します。
Possible impacts	ローカルのゲスト OS ユーザにより、サービス運用妨害 (無限ループおよび QEMU プロセスクラッシュ) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Feb. 28, 2017, midnight
Registration Date	April 17, 2017, 6:55 p.m.
Last Update	April 17, 2017, 6:55 p.m.

Affected System

Fabrice Bellard

QEMU

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2017-5987	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5987
National Vulnerability Database (NVD)
2	CVE-2017-5987	https://nvd.nist.gov/vuln/detail/CVE-2017-5987

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-399	https://jvndb.jvn.jp/ja/cwe/CWE-399.html

ベンダー情報

No	Name	URL
QEMU
1	sd: sdhci: check transfer mode register in multi block transfer	http://git.qemu-project.org/?p=qemu.git;a=commit;h=6e86d90352adf6cb08295255220295cf23c4286e
Red Hat Bugzilla
2	Bug 1421995	https://bugzilla.redhat.com/show_bug.cgi?id=1421995

Change Log

No	Changed Details	Date of change
0	[2017年04月17日] 掲載	Feb. 17, 2018, 10:37 a.m.