The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemuUpgrade xen | Jul 2, 2018 | Jul 2, 2018 |
| Centos_linux | — | Upgrade kvmUpgrade qemu-guest-agentUpgrade kvm-debuginfoUpgrade qemu-kvmUpgrade kvm-qemu-imgUpgrade qemu-kvm-debuginfoUpgrade kmod-kvm-debugUpgrade kmod-kvmUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade kvm-tools | Feb 26, 2017 | Feb 10, 2017 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Feb 10, 2017 |
| Freebsd | — | Upgrade xen-tools | Feb 11, 2017 | Feb 11, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu.Upgrade app-emulation/xen.Upgrade app-emulation/xen-tools. | Oct 30, 2017 | Feb 21, 2017 |
| Oracle_linux | — | Upgrade qemu-kvm-commonUpgrade kmod-kvmUpgrade qemu-kvm-toolsUpgrade qemu-guest-agentUpgrade kvm-toolsUpgrade kvm-qemu-imgUpgrade kmod-kvm-debugUpgrade kvmUpgrade qemu-imgUpgrade qemu-kvm | Feb 24, 2017 | Jan 24, 2017 |
| Redhat_linux | — | Upgrade kvm-toolsUpgrade qemu-kvm-commonUpgrade kvmUpgrade kmod-kvm-debugUpgrade qemu-guest-agentUpgrade kvm-qemu-imgNo solution existsUpgrade qemu-kvmUpgrade kmod-kvmUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade kvm-debuginfoUpgrade qemu-img | Feb 24, 2017 | Feb 10, 2017 |
| Suse | — | Upgrade qemu-seabiosUpgrade qemu-audio-ossUpgrade xen-tools-xendomains-wait-diskUpgrade xenUpgrade qemu-audio-paUpgrade qemu-sgabiosUpgrade xen-doc-htmlUpgrade kvmUpgrade qemu-s390Upgrade qemu-ui-cursesUpgrade qemu-microvmUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-vgabiosUpgrade qemu-armUpgrade qemu-audio-alsaUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ksmUpgrade xen-kmp-paeUpgrade qemu-x86Upgrade xen-tools-domUUpgrade xen-kmp-defaultUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-qxlUpgrade qemu-ui-spice-coreUpgrade qemu-ui-gtkUpgrade qemu-hw-usb-redirectUpgrade xen-libs-32bitUpgrade qemu-toolsUpgrade qemu-block-rbdUpgrade qemu-langUpgrade qemu-block-sshUpgrade qemu-guest-agentUpgrade qemu-block-iscsiUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ipxeUpgrade xen-toolsUpgrade xen-develUpgrade qemu-ppcUpgrade qemu-ui-openglUpgrade qemuUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-kvmUpgrade xen-doc-pdfUpgrade qemu-chardev-spiceUpgrade qemu-audio-spiceUpgrade qemu-block-curlUpgrade qemu-chardev-baumUpgrade xen-libs | Feb 28, 2017 | Feb 10, 2017 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-sparc | Apr 21, 2017 | Feb 10, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub