Threats affecting pkg:github/qemu-project/qemu

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.5	EPSS 0.4%	CVE-2024-3567net · Reachable Assertion Medium5.5EPSS 0.4%2024-04-10GCVE DatabaseCVE-2024-3567 CVE-2024-3567 is a reachable assertion vulnerability in QEMU's update_sctp_checksum() function within the net component. It occurs when calculating the checksum of a short-sized fragmented packet, leading to an assertion failure. This flaw allows a malicious guest to crash QEMU, causing a denial of service (DoS) condition. The vulnerability has a CVSS score of 5.5 (medium severity). Red Hat has released security updates addressing this issue in qemu-kvm packages for Red Hat Enterprise Linux 9 and related variants. EPSS 0.4%Vulnerability CWE-617	GCVE Database	2024-04-10

Page 1 of 1