CVE-2017-5898

Qemu: usb: integer overflow in emulated_apdu_from_guest

Loading…

Severity

Moderate

Red Hat Product Security

CVSS 3.0

Review impact separately from score.

Published · February 3, 2017

Updated · June 28, 2026

Description

An integer overflow flaw was found in Quick Emulator (QEMU) in the CCID Card device support. The flaw could occur while passing messages via command/response packets to and from the host. A privileged user inside a guest could use this flaw to crash the QEMU process.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 4
CVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L

CVSS 2.0 · 3.8
AV:A/AC:M/Au:S/C:N/I:P/A:P

CWE-190 · Integer Overflow or Wraparound