Buffer overflow in Qemu

CVE-2010-0297

Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS users to cause a denial of service (guest OS crash or hang) or possibly execute arbitrary code on the host OS via a crafted USB packet.

Vulnerability class: Buffer Overflow

EPSS: 0.005 (40.9th percentile) — read the EPSS interpretation.

Affected products

  • Qemu — versions 0.4.2, 0.5.3, 0.10.5
  • N/a — versions n/a

Weakness classification (CWE)

References