ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index value during an ati_mm_read or ati_mm_write call.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Jun 4, 2020 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Jun 4, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Nov 12, 2020 | Jun 4, 2020 |
| Suse | — | Upgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-spiceUpgrade qemu-linux-userUpgrade qemu-kvmUpgrade qemu-block-rbdUpgrade qemu-sgabiosUpgrade qemu-x86Upgrade qemu-s390xUpgrade qemu-guest-agentUpgrade qemu-block-nfsUpgrade qemu-hw-display-qxlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-paUpgrade qemu-ui-sdlUpgrade qemu-vgabiosUpgrade qemuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ppcUpgrade qemu-block-glusterUpgrade qemu-armUpgrade qemu-toolsUpgrade qemu-seabiosUpgrade qemu-ipxeUpgrade qemu-ksmUpgrade qemu-chardev-baumUpgrade qemu-block-iscsiUpgrade qemu-skibootUpgrade qemu-s390Upgrade qemu-ui-gtkUpgrade qemu-chardev-spiceUpgrade qemu-microvmUpgrade qemu-testsuiteUpgrade qemu-extraUpgrade qemu-vhost-user-gpuUpgrade qemu-ui-openglUpgrade qemu-audio-alsaUpgrade qemu-ui-spice-appUpgrade qemu-audio-sdlUpgrade qemu-block-curlUpgrade qemu-block-sshUpgrade qemu-ui-spice-coreUpgrade qemu-block-dmgUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-cursesUpgrade qemu-lang | Jul 29, 2020 | Jun 4, 2020 |
| Ubuntu | — | Upgrade qemu-system-x86-microvmUpgrade qemu-system-armUpgrade qemu-system-x86-xenUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemuUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system | Aug 20, 2020 | Jun 4, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub