The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 30, 2017 | Aug 2, 2016 |
| Centos_linux | — | Upgrade qemu-kvmUpgrade libcacardUpgrade kvmUpgrade qemu-guest-agentUpgrade libcacard-toolsUpgrade qemu-kvm-commonUpgrade libcacard-develUpgrade qemu-kvm-toolsUpgrade kvm-toolsUpgrade kmod-kvmUpgrade kvm-qemu-imgUpgrade qemu-imgUpgrade kmod-kvm-debug | Oct 21, 2016 | Aug 2, 2016 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Jul 30, 2016 |
| Freebsd | — | Upgrade xen-tools | Dec 10, 2025 | Aug 2, 2016 |
| Oracle_linux | — | Upgrade qemu-guest-agentUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade libcacard-develUpgrade libcacardUpgrade kvm-toolsUpgrade kmod-kvmUpgrade qemu-kvm-commonUpgrade kvmUpgrade kvm-qemu-imgUpgrade qemu-kvmUpgrade kmod-kvm-debugUpgrade libcacard-tools | Aug 9, 2016 | Jul 27, 2016 |
| Redhat_linux | — | Upgrade kvm-toolsUpgrade qemu-guest-agentNo solution existsUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade kvmUpgrade qemu-kvm-debuginfoUpgrade kmod-kvmUpgrade kmod-kvm-debugUpgrade libcacard-develUpgrade qemu-imgUpgrade kvm-qemu-imgUpgrade libcacardUpgrade qemu-kvmUpgrade kvm-debuginfoUpgrade libcacard-tools | Aug 9, 2016 | Aug 2, 2016 |
| Suse | — | Upgrade qemu-chardev-baumUpgrade xen-doc-htmlUpgrade qemu-s390Upgrade xen-tools-domUUpgrade qemu-ui-cursesUpgrade qemu-audio-paUpgrade qemu-hw-usb-redirectUpgrade qemu-toolsUpgrade qemu-x86Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-sgabiosUpgrade xenUpgrade qemu-vgabiosUpgrade kvmUpgrade qemu-microvmUpgrade xen-kmp-defaultUpgrade qemu-block-curlUpgrade qemu-kvmUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade xen-toolsUpgrade qemu-audio-spiceUpgrade xen-kmp-paeUpgrade qemu-seabiosUpgrade qemu-block-iscsiUpgrade qemu-hw-display-qxlUpgrade qemu-block-sshUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-langUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-armUpgrade qemu-audio-ossUpgrade qemu-block-rbdUpgrade qemu-chardev-spiceUpgrade qemu-skibootUpgrade qemu-ksmUpgrade qemuUpgrade xen-develUpgrade qemu-ppcUpgrade xen-doc-pdfUpgrade qemu-ipxeUpgrade qemu-ui-spice-coreUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-libsUpgrade qemu-ui-openglUpgrade qemu-s390xUpgrade qemu-guest-agentUpgrade xen-libs-32bit | Aug 26, 2016 | Aug 2, 2016 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-kvmUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-mips | Aug 6, 2016 | Aug 2, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub