The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 30, 2017 | Aug 2, 2016 |
| Centos_linux | — | Upgrade kvm-toolsUpgrade kmod-kvm-debugUpgrade kmod-kvmUpgrade libcacard-toolsUpgrade qemu-imgUpgrade kvm-qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade libcacard-develUpgrade kvmUpgrade qemu-kvmUpgrade libcacardUpgrade qemu-guest-agent | Oct 21, 2016 | Aug 2, 2016 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Jul 30, 2016 |
| Freebsd | — | Upgrade xen-tools | Dec 10, 2025 | Aug 2, 2016 |
| Oracle_linux | — | Upgrade qemu-guest-agentUpgrade libcacard-develUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade kvm-qemu-imgUpgrade kmod-kvm-debugUpgrade qemu-kvmUpgrade kmod-kvmUpgrade libcacard-toolsUpgrade kvmUpgrade libcacardUpgrade kvm-tools | Aug 9, 2016 | Jul 27, 2016 |
| Redhat_linux | — | Upgrade kvm-toolsUpgrade kvmUpgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonNo solution existsUpgrade kmod-kvmUpgrade qemu-kvmUpgrade libcacardUpgrade qemu-kvm-debuginfoUpgrade libcacard-toolsUpgrade qemu-imgUpgrade kvm-qemu-imgUpgrade kvm-debuginfoUpgrade kmod-kvm-debugUpgrade libcacard-devel | Aug 9, 2016 | Aug 2, 2016 |
| Suse | — | Upgrade qemu-seabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-qxlUpgrade qemu-ui-openglUpgrade qemu-s390xUpgrade xen-develUpgrade qemu-hw-display-virtio-gpuUpgrade xen-kmp-paeUpgrade qemu-chardev-spiceUpgrade xen-libs-32bitUpgrade qemu-ui-spice-coreUpgrade qemuUpgrade qemu-audio-spiceUpgrade qemu-ksmUpgrade qemu-block-sshUpgrade qemu-skibootUpgrade qemu-block-rbdUpgrade xen-toolsUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-appUpgrade qemu-guest-agentUpgrade qemu-ppcUpgrade xen-doc-pdfUpgrade qemu-langUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-armUpgrade qemu-ipxeUpgrade xen-libsUpgrade qemu-kvmUpgrade qemu-s390Upgrade qemu-audio-paUpgrade xenUpgrade xen-tools-domUUpgrade qemu-x86Upgrade qemu-chardev-baumUpgrade qemu-sgabiosUpgrade xen-kmp-defaultUpgrade qemu-block-curlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-gtkUpgrade qemu-audio-alsaUpgrade qemu-vgabiosUpgrade xen-doc-htmlUpgrade qemu-microvmUpgrade qemu-ui-cursesUpgrade qemu-hw-usb-redirectUpgrade kvmUpgrade qemu-tools | Aug 26, 2016 | Aug 2, 2016 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-mips | Aug 6, 2016 | Aug 2, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub