ZDI-CAN-24080 LOW 2.5 Overdue Jun 12, 2024

QEMU

QEMU is a widely-used open-source virtualization platform that emulates processors and manages virtual machines across various operating systems. This vulnerability has a low severity rating (CVSS 2.5) and requires local access with high privileges and difficult conditions to exploit, while only causing minor confidentiality impact with no integrity or availability effects. Security teams should monitor for patches between the June 2024 report date and October 2024 deadline, though the limited attack surface and low impact make this a lower-priority remediation compared to other vulnerabilities.

Advisory Details
Researcher Discovered by: Cyrille Chatras
Reported June 12, 2024
Deadline October 10, 2024 553d overdue
CVSS Vector AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy