CVE-2007-1366
EPSS 0.06%
Description
QEMU 0.8.2 allows local users to crash a virtual machine via the divisor operand to the aam instruction, as demonstrated by "aam 0x0," which triggers a divide-by-zero error.
How to fix CVE-2007-1366
To remediate CVE-2007-1366, upgrade the affected package to a fixed version below.
- Debian/qemu—upgrade to 0.9.0-2 or later
Is CVE-2007-1366 being exploited?
Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 0.9.0-2