CVE-2017-13711

Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to cause a denial of service (QEMU instance…

published September 1, 2017

CVSS
—
EPSS
4%
Percentile
90.1
In the wild
Unconfirmed
What it is

Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to cause a denial of service (QEMU instance crash) by leveraging failure to properly clear ifq_so from pending packets.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03841 · 90.1th percentile
Published
2017-09-01T13:00Z
EPSS history
Timeline
  • 01 SEP 13:00Z
    Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to cause a denial of service (QEMU instance…
    cvelistv5