Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemuUpgrade xen | Jul 2, 2018 | Jul 2, 2018 |
| Centos_linux | — | Upgrade kvm-toolsUpgrade kmod-kvmUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfoUpgrade kmod-kvm-debugUpgrade qemu-kvm-toolsUpgrade qemu-guest-agentUpgrade kvm-qemu-imgUpgrade kvmUpgrade qemu-kvmUpgrade kvm-debuginfo | Feb 26, 2017 | Feb 10, 2017 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Feb 10, 2017 |
| Freebsd | — | Upgrade xen-tools | Feb 11, 2017 | Feb 11, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu.Upgrade app-emulation/xen.Upgrade app-emulation/xen-tools. | Oct 30, 2017 | Feb 21, 2017 |
| Oracle_linux | — | Upgrade kvmUpgrade qemu-guest-agentUpgrade kvm-toolsUpgrade qemu-imgUpgrade qemu-kvmUpgrade kmod-kvm-debugUpgrade kvm-qemu-imgUpgrade qemu-kvm-commonUpgrade kmod-kvmUpgrade qemu-kvm-tools | Feb 24, 2017 | Jan 24, 2017 |
| Redhat_linux | — | Upgrade kmod-kvm-debugUpgrade kvm-qemu-imgNo solution existsUpgrade kvmUpgrade qemu-kvm-commonUpgrade qemu-guest-agentUpgrade kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade qemu-kvmUpgrade kmod-kvmUpgrade kvm-debuginfo | Feb 24, 2017 | Feb 10, 2017 |
| Suse | — | Upgrade qemu-block-iscsiUpgrade qemu-guest-agentUpgrade xen-toolsUpgrade qemu-block-rbdUpgrade qemu-langUpgrade qemu-ui-spice-coreUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-qxlUpgrade qemu-ipxeUpgrade qemu-block-curlUpgrade qemu-audio-spiceUpgrade qemuUpgrade xen-doc-pdfUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-s390xUpgrade qemu-ppcUpgrade qemu-ui-gtkUpgrade qemu-ui-openglUpgrade qemu-toolsUpgrade qemu-chardev-spiceUpgrade xen-develUpgrade qemu-block-sshUpgrade xen-libs-32bitUpgrade qemu-chardev-baumUpgrade xen-libsUpgrade qemu-kvmUpgrade qemu-ui-spice-appUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpuUpgrade xenUpgrade qemu-vgabiosUpgrade qemu-seabiosUpgrade qemu-audio-paUpgrade qemu-armUpgrade qemu-microvmUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-sgabiosUpgrade xen-tools-domUUpgrade qemu-ui-cursesUpgrade qemu-s390Upgrade qemu-audio-alsaUpgrade qemu-skibootUpgrade qemu-audio-ossUpgrade qemu-ksmUpgrade xen-doc-htmlUpgrade kvmUpgrade qemu-hw-display-virtio-vgaUpgrade xen-kmp-defaultUpgrade xen-kmp-pae | Feb 28, 2017 | Feb 10, 2017 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-ppc | Apr 21, 2017 | Feb 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub