CVE-2024-26327
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2024-26327
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-26327.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-26327
- Related
- Published
- 2024-02-19T05:15:22Z
- Modified
- 2024-09-11T05:03:21.449810Z
- Summary
- [none]
- Details
-
An issue was discovered in QEMU 7.1.0 through 8.2.1. registervfs in hw/pci/pciesriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.
- References
Affected packages
Debian:12 / qemu
Package
- Name
- qemu
- Purl
- pkg:deb/debian/qemu?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1:7.2+dfsg-7+deb12u6
Debian:13 / qemu
Package
- Name
- qemu
- Purl
- pkg:deb/debian/qemu?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1:8.2.3+ds-1
Affected versions
1:7.*
1:7.2+dfsg-7
1:8.*
1:8.0~rc2+dfsg-1
1:8.0~rc3+dfsg-1
1:8.0~rc3+dfsg-2
1:8.0~rc4+dfsg-1
1:8.0~rc4+dfsg-2
1:8.0+dfsg-1
1:8.0+dfsg-2
1:8.0+dfsg-3
1:8.0+dfsg-4
1:8.0.2+dfsg-1
1:8.0.2+dfsg-2
1:8.0.2+dfsg-3
1:8.0.3+dfsg-1~bpo12+1
1:8.0.3+dfsg-1
1:8.0.3+dfsg-2
1:8.0.3+dfsg-3
1:8.0.3+dfsg-4
1:8.0.3+dfsg-5
1:8.0.4+dfsg-1~bpo12+1
1:8.0.4+dfsg-1
1:8.0.4+dfsg-2
1:8.0.4+dfsg-3
1:8.1.0~rc2+dfsg-1
1:8.1.0~rc3+dfsg-1
1:8.1.0~rc3+dfsg-2
1:8.1.0~rc4+ds-1
1:8.1.0~rc4+ds-2
1:8.1.0~rc4+ds-3
1:8.1.0~rc4+ds-4
1:8.1.0+ds-1~exp1
1:8.1.0+ds-1~exp2
1:8.1.0+ds-1
1:8.1.0+ds-2
1:8.1.0+ds-3
1:8.1.0+ds-4
1:8.1.0+ds-5
1:8.1.0+ds-6
1:8.1.1+ds-1
1:8.1.1+ds-2~bpo12+1
1:8.1.1+ds-2
1:8.1.2+ds-1~bpo12+1
1:8.1.2+ds-1
1:8.1.3+ds-1
1:8.2.0~rc0+ds-1
1:8.2.0~rc1+ds-1
1:8.2.0~rc2+ds-1
1:8.2.0+ds-1
1:8.2.0+ds-2
1:8.2.0+ds-3
1:8.2.0+ds-4
1:8.2.0+ds-5~bpo12+1
1:8.2.0+ds-5
1:8.2.1+ds-1~bpo12+1
1:8.2.1+ds-1
1:8.2.1+ds-2
1:8.2.2+ds-1
1:8.2.2+ds-2