CVE-2007-1322 Denial of service in n/a

Low 2.1 Published Updated

Local users can halt a QEMU virtual machine by executing the icebp instruction, causing a denial of service.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
Available

What is CVE-2007-1322?

CVE-2007-1322 is a low-severity denial of service vulnerability in Debian Debian Linux, published on 2 May 2007. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

QEMU 0.8.2 allows local users to halt a virtual machine by executing the icebp instruction.

Which versions are affected by CVE-2007-1322?

It affects 2 products.

Products include Debian Debian Linux, Qemu Qemu.

How do I fix CVE-2007-1322?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2007-1322 being exploited?

There is no known exploitation of CVE-2007-1322 in the wild and no public exploit code.

All Debian Debian Linux vulnerabilities

Sources

Also known as DEBIAN-CVE-2007-1322, GHSA-m9w2-rp2g-qf6q.

Is CVE-2007-1322 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free