ZDI-CAN-23963
LOW 2.5
Overdue
Jun 12, 2024
QEMU
QEMU is a widely-used open-source virtualization platform that emulates various hardware architectures for running virtual machines. This vulnerability has a low severity rating of 2.5 and requires local access with high privileges and difficult conditions to exploit, resulting in minimal confidentiality impact with no integrity or availability effects. Security teams should monitor for patches from QEMU following the October 10, 2024 vendor deadline and apply updates to systems where privileged local users could potentially be a concern.
Advisory Details
Researcher
Discovered by:
Cyrille Chatras
Reported
June 12, 2024
Deadline
October 10, 2024
553d overdue
CVSS Vector
AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N