The rocker_io_writel function in hw/net/rocker/rocker.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging failure to limit DMA buffer size.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Nov 4, 2016 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Nov 4, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Nov 4, 2016 |
| Suse | — | Upgrade qemu-skibootUpgrade qemu-ksmUpgrade qemu-armUpgrade qemu-hw-display-qxlUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-openglUpgrade qemu-seabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-block-iscsiUpgrade qemu-hw-display-virtio-gpuUpgrade qemuUpgrade qemu-ui-cursesUpgrade qemu-audio-paUpgrade qemu-ui-spice-coreUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-ossUpgrade qemu-ppcUpgrade qemu-microvmUpgrade qemu-ipxeUpgrade qemu-audio-alsaUpgrade qemu-s390Upgrade qemu-chardev-spiceUpgrade qemu-block-sshUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade qemu-audio-spiceUpgrade qemu-vgabiosUpgrade qemu-langUpgrade qemu-chardev-baumUpgrade qemu-x86Upgrade qemu-s390xUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-gtk | Nov 23, 2016 | Nov 4, 2016 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-ppc | Nov 9, 2016 | Nov 4, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub