CVE-2017-5898

Published: Mar 15, 2017Modified: May 13, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

Integer overflow in the emulated_apdu_from_guest function in usb/dev-smartcard-reader.c in Quick Emulator (Qemu), when built with the CCID Card device emulator support, allows local users to cause a denial of service (application crash) via a large Application Protocol Data Units (APDU) unit.

Affected (6)

Products: Qemu: Qemu · Suse: Linux Enterprise Desktop, Linux Enterprise Server, Linux Enterprise Server For Sap, Linux Enterprise Software Development Kit

1 product

4 products

Linux Enterprise Desktop

Linux Enterprise Server

Linux Enterprise Server For Sap

Linux Enterprise Software Development Kit

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Qemu Qemu	Up to 2.8.1.1

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Suse Linux Enterprise Desktop	Version 12 sp1
Suse Linux Enterprise Server	Version 12 ltss
Suse Linux Enterprise Server	Version 12 sp1
Suse Linux Enterprise Server For Sap	Version 12
Suse Linux Enterprise Software Development Kit	Version 12 sp1

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (18)

http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=c7dfbf322595ded4e70b626bf83158a9f3807c6a

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html

Source: cve@mitre.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2017/02/07/3

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/96112

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2017:1856

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2392

Source: cve@mitre.org

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1419699

Source: cve@mitre.org

Issue TrackingPatch

https://security.gentoo.org/glsa/201702-28

Source: cve@mitre.org

PatchThird Party AdvisoryVDB Entry

http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=c7dfbf322595ded4e70b626bf83158a9f3807c6a

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00045.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2017-02/msg00048.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.openwall.com/lists/oss-security/2017/02/07/3

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/96112

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHSA-2017:1856

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:2392

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1419699

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatch

https://security.gentoo.org/glsa/201702-28

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryVDB Entry

Timeline

No history available yet.