CVE-2024-8354Medium· 5.5▾ SunlitA flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU pro…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.3%
A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.
qemu (all versions)qemu-kvm (all versions)qemu-kvmqemu-kvmqemu-kvm-mavirt:rhel/qemu-kvm (all versions)virt:av/qemu-kvm (all versions)qemu-kvm (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2024-6505Medium· 6.8Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss
CVE-2024-8612Low· 3.8Qemu-kvm: information leak in virtio devices
CVE-2026-120749Medium· 6.2Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus
CVE-2024-4693Medium· 5.5Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash
CVE-2024-3567Medium· 5.5Qemu-kvm: net: assertion failure in update_sctp_checksum()
CVE-2023-5871Medium· 5.3Libnbd: malicious nbd server may crash libnbd