A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability. This flaw affects QEMU versions prior to 7.0.0.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qemu-kvm-device-display-virtio-gpu-pci-glUpgrade qemu-kvm-commonUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-device-display-virtio-gpu-glUpgrade qemu-kvmUpgrade qemu-kvm-docsUpgrade qemu-kvm-toolsUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-curlUpgrade qemu-imgUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-display-virtio-vga-glUpgrade qemu-pr-helperUpgrade qemu-kvm-audio-paUpgrade qemu-guest-agentUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-display-virtio-gpu-pci | Nov 21, 2022 | May 11, 2022 |
| Centos_linux | — | Upgrade qemu-kvm-tests-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-glUpgrade qemu-kvm-device-display-virtio-gpu-gl-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-glUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvm-common-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-block-curlUpgrade qemu-guest-agentUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-gl-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-device-display-virtio-vga-glUpgrade qemu-pr-helperUpgrade qemu-kvmUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-device-display-virtio-vga-gl-debuginfoUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-core | Nov 16, 2022 | May 11, 2022 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | May 11, 2022 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | May 11, 2022 |
| Oracle_linux | — | Upgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-display-virtio-gpu-glUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-commonUpgrade qemu-pr-helperUpgrade qemu-kvm-docsUpgrade qemu-guest-agentUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-toolsUpgrade qemu-kvm-coreUpgrade qemu-kvmUpgrade qemu-kvm-device-display-virtio-gpu-pci-glUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-display-virtio-vga-glUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-imgUpgrade qemu-kvm-block-rbd | Nov 22, 2022 | Dec 9, 2020 |
| Redhat_linux | — | Upgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-img-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade qemu-kvm-device-display-virtio-vga-glUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-device-display-virtio-vga-gl-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-glUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-display-virtio-gpu-glUpgrade qemu-kvm-block-curlUpgrade qemu-guest-agentUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-device-display-virtio-gpu-gl-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-pr-helperUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-gl-debuginfoUpgrade qemu-kvm-tests-debuginfo | Nov 16, 2022 | May 11, 2022 |
| Rocky_linux | — | Upgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-display-virtio-gpu-pci-gl-debuginfoUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-display-virtio-gpu-pci-glUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-pr-helperUpgrade qemu-img-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-gl-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-device-display-virtio-gpu-glUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-device-display-virtio-vga-gl-debuginfoUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-display-virtio-vga-glUpgrade qemu-kvm-toolsUpgrade qemu-guest-agent-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-tools-debuginfo | Mar 12, 2024 | May 11, 2022 |
| Suse | — | Upgrade qemu-hw-display-virtio-gpuUpgrade qemuUpgrade qemu-block-nfsUpgrade qemu-kvmUpgrade qemu-vhost-user-gpuUpgrade qemu-vgabiosUpgrade qemu-extraUpgrade qemu-armUpgrade qemu-x86Upgrade qemu-ipxeUpgrade qemu-ui-sdlUpgrade qemu-audio-sdlUpgrade qemu-ui-cursesUpgrade qemu-ivshmem-toolsUpgrade qemu-sgabiosUpgrade qemu-block-dmgUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-qxlUpgrade qemu-s390Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-skibootUpgrade qemu-ppcUpgrade qemu-chardev-baumUpgrade qemu-block-glusterUpgrade qemu-microvmUpgrade qemu-ksmUpgrade qemu-audio-paUpgrade qemu-testsuiteUpgrade qemu-s390xUpgrade qemu-audio-spiceUpgrade qemu-seabiosUpgrade qemu-ui-spice-appUpgrade qemu-block-sshUpgrade qemu-ui-gtkUpgrade qemu-guest-agentUpgrade qemu-ui-openglUpgrade qemu-block-curlUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-alsaUpgrade qemu-ui-spice-coreUpgrade qemu-linux-userUpgrade qemu-block-rbdUpgrade qemu-chardev-spiceUpgrade qemu-toolsUpgrade qemu-block-iscsiUpgrade qemu-langUpgrade qemu-hw-usb-smartcard | Jul 22, 2021 | Jul 21, 2021 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-xenUpgrade qemu-system-x86-microvmUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-x86-xenUpgrade qemuUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system | Jan 9, 2024 | May 11, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub