The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service (virtual machine crash) via unspecified vectors, resulting in a divide-by-zero error.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause     a denial of service (virtual machine crash) via unspecified vectors, resulting in a divide-by-zero error.
    (CVE-2007-2894)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-200711-21 (Bochs: Multiple vulnerabilities)

    Tavis Ormandy of the Google Security Team discovered a heap-based     overflow vulnerability in the NE2000 driver (CVE-2007-2893). He also     discovered a divide-by-zero error in the emulated floppy disk     controller (CVE-2007-2894).
  Impact :

    A local attacker in the guest operating system could exploit these     issues to execute code outside of the virtual machine, or cause Bochs     to crash.
  Workaround :

    There is no known workaround at this time.

This security update of bochs fixes CVE-2007-2894 :

The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of service (virtual machine crash) via unspecified vectors, resulting in a divide-by-zero error.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
253814	Linux Distros Unpatched Vulnerability : CVE-2007-2894	Nessus	Misc.	medium
28260	GLSA-200711-21 : Bochs: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
27733	Fedora 7 : bochs-2.3-7.fc7 (2007-1778)	Nessus	Fedora Local Security Checks	low

Detections

Analytics

CVE-2007-2894

medium

Tenable Plugins

medium

high

low