CVE-2017-17381 — Divide By Zero in Qemu

CWE-369 — Divide By Zero12 documents7 sources
Severity
6.5MEDIUMNVD
OSV4.4
EPSS
0.2%
top 59.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
QemuDebian QemuDebian Linux
Timeline
PublishedDec 7
Latest updateMay 13

Description

The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error and QEMU process crash) by unsetting vring alignment while updating Virtio rings.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HExploitability: 2.0 | Impact: 4.0

Affected Packages4 packages

▶debiandebian/qemu< qemu 1:2.11+dfsg-1 (bookworm)
▶Debianqemu/qemu< 1:2.11+dfsg-1+3
▶Ubuntuqemu/qemu< 2.0.0+dfsg-2ubuntu1.39+3
▶NVDqemu/qemu2.10.2+1

Also affects: Debian Linux 9.0

🔴Vulnerability Details

4
GHSA
GHSA-6v49-9gj6-jwwc: The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error and QEMU process crash) by unse↗2022-05-13
▶
OSV
qemu regression↗2018-03-05
▶
OSV
qemu vulnerabilities↗2018-02-20
▶
OSV
CVE-2017-17381: The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error and QEMU process crash) by unse↗2017-12-07
▶

📋Vendor Advisories

4
Ubuntu
QEMU regression↗2018-03-05
▶
Ubuntu
QEMU vulnerabilities↗2018-02-20
▶
Red Hat
Qemu: virtio: divide by zero exception while updating rings↗2017-11-24
▶
Debian
CVE-2017-17381: qemu - The Virtio Vring implementation in QEMU allows local OS guest users to cause a d...↗2017
▶

💬Community

3
Bugzilla
CVE-2017-17381 Qemu: virtio: divide by zero exception while updating rings [fedora-all]↗2017-12-05
▶
Bugzilla
CVE-2017-17381 Qemu: virtio: divide by zero exception while updating rings↗2017-12-05
▶
Bugzilla
CVE-2017-17381 xen: Qemu: virtio: divide by zero exception while updating rings [fedora-all]↗2017-12-05
▶