summary refs log tree commit diff stats
path: root/results/classifier/118/device/1171
diff options
context:
space:
mode:
authorChristian Krinitsin <mail@krinitsin.com>2025-06-16 16:59:00 +0000
committerChristian Krinitsin <mail@krinitsin.com>2025-06-16 16:59:33 +0000
commit9aba81d8eb048db908c94a3c40c25a5fde0caee6 (patch)
treeb765e7fb5e9a3c2143c68b0414e0055adb70e785 /results/classifier/118/device/1171
parentb89a938452613061c0f1f23e710281cf5c83cb29 (diff)
downloadqemu-analysis-9aba81d8eb048db908c94a3c40c25a5fde0caee6.tar.gz
qemu-analysis-9aba81d8eb048db908c94a3c40c25a5fde0caee6.zip
add 18th iteration of classifier
Diffstat (limited to 'results/classifier/118/device/1171')
-rw-r--r--results/classifier/118/device/117133
1 files changed, 33 insertions, 0 deletions
diff --git a/results/classifier/118/device/1171 b/results/classifier/118/device/1171
new file mode 100644
index 000000000..24416193d
--- /dev/null
+++ b/results/classifier/118/device/1171
@@ -0,0 +1,33 @@
+device: 0.893
+network: 0.707
+i386: 0.533
+graphic: 0.528
+x86: 0.509
+hypervisor: 0.429
+architecture: 0.391
+boot: 0.357
+semantic: 0.293
+PID: 0.237
+virtual: 0.234
+ppc: 0.210
+debug: 0.192
+peripherals: 0.157
+register: 0.151
+socket: 0.150
+mistranslation: 0.096
+user-level: 0.088
+vnc: 0.086
+files: 0.066
+performance: 0.063
+assembly: 0.060
+VMM: 0.055
+permissions: 0.051
+TCG: 0.045
+risc-v: 0.043
+arm: 0.010
+kernel: 0.005
+KVM: 0.003
+
+tulip: DMA reentrancy issue leads to stack overflow (CVE-2022-2962)
+Description of problem:
+A DMA reentrancy issue was found in the tulip emulation. When tulip reads or writes to  rx/tx descriptor ( tulip_desc_read/write ) or copies  rx/tx frame(tulip_copy_rx_bytes / tulip_copy_tx_buffers), it doesn't check whether the destination address is its own MMIO address. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition or, potentially, executing arbitrary code within the context of the QEMU process on the host.