cbcvebase.
CVE-2022-4172
published 2022-11-29

CVE-2022-4172: An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the read_erst_record() and…

PriorityP426medium6.5CVSS 3.1
AVLACLPRLUINSCCNINAH
EPSS
0.38%
30.4th percentile
An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the read_erst_record() and write_erst_record() functions. Both issues may allow the guest to overrun the host buffer allocated for the ERST memory device. A malicious guest could use these flaws to crash the QEMU process on the host.

Affected

11 ranges
VendorProductVersion rangeFixed in
debianqemu< qemu 1:7.2+dfsg-1 (bookworm)qemu 1:7.2+dfsg-1 (bookworm)
fedoraprojectfedora
qemuqemu
qemuqemu>= 0 < 1:7.2+dfsg-11:7.2+dfsg-1
qemuqemu>= 0 < 1:7.2+dfsg-11:7.2+dfsg-1
qemuqemu>= 0 < 1:7.2+dfsg-11:7.2+dfsg-1
qemuqemu>= 0 < 1:4.2-3ubuntu6.271:4.2-3ubuntu6.27
qemuqemu>= 0 < 1:6.2+dfsg-2ubuntu6.111:6.2+dfsg-2ubuntu6.11
qemuqemu>= 0 < 2.0.0+dfsg-2ubuntu1.47+esm32.0.0+dfsg-2ubuntu1.47+esm3
qemuqemu>= 0 < 1:2.5+dfsg-5ubuntu10.51+esm21:2.5+dfsg-5ubuntu10.51+esm2
qemuqemu>= 0 < 1:2.11+dfsg-1ubuntu7.42+esm11:2.11+dfsg-1ubuntu7.42+esm1

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
osv8.8HIGH
vendor_ubuntu8.8HIGH
vendor_debian6.5MEDIUM
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.