Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS users to cause a denial of service (guest OS crash or hang) or possibly execute arbitrary code on the host OS via a crafted USB packet.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2010-02-12T19:00:00

Updated: 2024-08-07T00:45:11.764Z

Reserved: 2010-01-12T00:00:00

Link: CVE-2010-0297

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2010-02-12T19:30:00.503

Modified: 2023-02-13T02:21:06.170

Link: CVE-2010-0297

cve-icon Redhat

Severity : Moderate

Publid Date: 2009-10-04T00:00:00Z

Links: CVE-2010-0297 - Bugzilla