← Back

CVE-2010-0297

nvd nist
Published: Feb 12, 2010Modified: Apr 29, 2026

JSON object

Loading...
7.2
Vector
AV:L/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 3.9 / Impact: 10.0
Source: NVD

Description

Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS users to cause a denial of service (guest OS crash or hang) or possibly execute arbitrary code on the host OS via a crafted USB packet.

Affected (41)

Products: Qemu: Qemu
1 product
Qemu
Configuration A
41 vulnerable
Vulnerable SoftwareAffected Versions
Qemu
Up to 0.11.0
Version 0.1.0
Version 0.1.1
Version 0.1.2
Version 0.1.3
Version 0.1.4
Version 0.1.5
Version 0.1.6
Version 0.10.0
Version 0.10.1
Version 0.10.2
Version 0.10.3
Version 0.10.4
Version 0.10.5
Version 0.10.6
Version 0.11.0-rc0
Version 0.11.0-rc1
Version 0.11.0-rc2
Version 0.2.0
Version 0.3.0
Version 0.4.0
Version 0.4.1
Version 0.4.2
Version 0.4.3
Version 0.5.0
Version 0.5.1
Version 0.5.2
Version 0.5.3
Version 0.5.4
Version 0.5.5
Version 0.6.0
Version 0.6.1
Version 0.7.0
Version 0.7.1
Version 0.7.2
Version 0.8.0
Version 0.8.1
Version 0.8.2
Version 0.9.0
Version 0.9.1-5
Version 0.9.1

References (24)

Source: secalert@redhat.com
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.