Vulnerability · Published Jul 11, 2022 · Assigned by mitre
CVE-2022-35414
High 8.8
In plain English
A high-severity security flaw in the qemu package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)8.8High
Exploit odds (30 days)0.7%top 48.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., "Bugs affecting the non-virtualization use case are not considered security bugs at this time.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | qemu | 1:7.1+dfsg-1 | DEBIAN-CVE-2022-35414 |
| Debian:13 | qemu | 1:7.1+dfsg-1 | DEBIAN-CVE-2022-35414 |
| Debian:14 | qemu | 1:7.1+dfsg-1 | DEBIAN-CVE-2022-35414 |
Affected products (as reported)
References
- https://github.com/qemu/qemu/blob/f200ff158d5abcb974a6b597a962b6b2fbea2b06/softmmu/physmem.c x_refsource_MISC
- https://github.com/qemu/qemu/commit/418ade7849ce7641c0f7333718caf5091a02fd4c x_refsource_MISC
- https://github.com/qemu/qemu/commit/3517fb726741c109cae7995f9ea46f0cab6187d6#diff-83c563ed6330dc5d49876f1116e7518b5c16654bbc6e9b4ea8e28f5833d576fcR482 x_refsource_MISC
- https://github.com/qemu/qemu/blob/v7.0.0/include/exec/cpu-all.h#L145-L148 x_refsource_MISC
- https://github.com/qemu/qemu/commit/3517fb726741c109cae7995f9ea46f0cab6187d6#diff-83c563ed6330dc5d49876f1116e7518b5c16654bbc6e9b4ea8e28f5833d576fcR482.aa x_refsource_MISC
- https://gitlab.com/qemu-project/qemu/-/issues/1065 x_refsource_MISC
- https://www.mail-archive.com/qemu-devel%40nongnu.org/msg895266.html x_refsource_MISC
- https://sick.codes/sick-2022-113 x_refsource_MISC
- [debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update mailing-list, x_refsource_MLIST
- https://www.qemu.org/docs/master/system/security.html#non-virtualization-use-case x_refsource_MISC