ZDI-CAN-23963 LOW 2.5 Overdue Jun 12, 2024

QEMU

QEMU is a widely-used open-source virtualization platform that emulates various hardware architectures for running virtual machines. This vulnerability has a low severity rating of 2.5 and requires local access with high privileges and difficult conditions to exploit, resulting in minimal confidentiality impact with no integrity or availability effects. Security teams should monitor for patches from QEMU following the October 10, 2024 vendor deadline and apply updates to systems where privileged local users could potentially be a concern.

Advisory Details
Researcher Discovered by: Cyrille Chatras
Reported June 12, 2024
Deadline October 10, 2024 553d overdue
CVSS Vector AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy