An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.
CVSS Details
- CVSS 3.1 Base Score: 3.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Feb 25, 2021 |
| Debian | — | Upgrade qemu | Apr 12, 2021 | Feb 25, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | Feb 25, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 28, 2022 | Feb 25, 2021 |
| Oracle_linux | — | Upgrade libguestfs-rsyncUpgrade libnbdUpgrade qemu-kvm-commonUpgrade qemu-system-aarch64-coreUpgrade qemu-kvmUpgrade libguestfs-man-pages-ukUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-gfs2Upgrade nbdfuseUpgrade supermin-develUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-secretUpgrade qemu-block-glusterUpgrade seabios-binUpgrade qemu-block-iscsiUpgrade nbdkitUpgrade libvirt-daemonUpgrade qemu-block-rbdUpgrade libvirt-daemon-driver-storageUpgrade libvirt-adminUpgrade libguestfs-bash-completionUpgrade libvirt-nssUpgrade netcf-libsUpgrade perl-Sys-VirtUpgrade libiscsi-utilsUpgrade libvirt-dbusUpgrade libvirt-develUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-benchmarkingUpgrade libguestfs-javadocUpgrade libguestfs-gobject-develUpgrade libguestfs-java-develUpgrade libnbd-develUpgrade libguestfs-toolsUpgrade libguestfs-develUpgrade libvirt-daemon-config-networkUpgrade libvirt-clientUpgrade libiscsi-develUpgrade libvirt-bash-completionUpgrade sgabios-binUpgrade hivex-develUpgrade qemu-kvm-block-curlUpgrade nbdkit-ssh-pluginUpgrade netcfUpgrade nbdkit-example-pluginsUpgrade seabiosUpgrade ivshmem-toolsUpgrade libguestfs-xfsUpgrade libvirt-daemon-kvmUpgrade virt-dibUpgrade libvirt-daemon-driver-nwfilterUpgrade nbdkit-xz-filterUpgrade virt-v2vUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-kvm-block-iscsiUpgrade superminUpgrade python3-libvirtUpgrade qemu-kvm-block-sshUpgrade qemu-system-aarch64Upgrade sgabiosUpgrade seavgabios-binUpgrade nbdkit-bash-completionUpgrade libvirtUpgrade libvirt-libsUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libguestfs-man-pages-jaUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-iscsiUpgrade ruby-hivexUpgrade qemu-imgUpgrade qemuUpgrade python3-hivexUpgrade nbdkit-vddk-pluginUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-winsupportUpgrade hivexUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-serverUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-gzip-pluginUpgrade netcf-develUpgrade libguestfs-tools-cUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-commonUpgrade perl-Sys-GuestfsUpgrade nbdkit-develUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-rbdUpgrade nbdkit-python-pluginUpgrade libiscsiUpgrade python3-libguestfsUpgrade nbdkit-curl-pluginUpgrade qemu-system-x86Upgrade libguestfs-gobjectUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-system-x86-coreUpgrade libvirt-lock-sanlockUpgrade python3-libnbdUpgrade ruby-libguestfsUpgrade qemu-kvm-block-glusterUpgrade nbdkit-linuxdisk-pluginUpgrade nbdkit-basic-filtersUpgrade nbdkit-basic-plugins | Feb 5, 2022 | Jan 30, 2021 |
| Suse | — | Upgrade qemu-chardev-spiceUpgrade qemu-kvmUpgrade qemu-ui-cursesUpgrade qemu-ipxeUpgrade qemu-block-nfsUpgrade qemu-ui-sdlUpgrade qemu-ui-openglUpgrade qemu-seabiosUpgrade qemu-ui-spice-appUpgrade qemu-audio-sdlUpgrade qemu-x86Upgrade qemu-s390xUpgrade qemu-vhost-user-gpuUpgrade qemu-SLOFUpgrade qemu-chardev-baumUpgrade qemu-extraUpgrade qemu-audio-spiceUpgrade qemu-s390Upgrade qemu-sgabiosUpgrade qemu-block-dmgUpgrade qemu-ksmUpgrade qemu-hw-display-virtio-gpuUpgrade qemuUpgrade qemu-block-curlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-accel-tcg-x86Upgrade qemu-vgabiosUpgrade qemu-hw-usb-hostUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-paUpgrade qemu-armUpgrade qemu-block-sshUpgrade qemu-toolsUpgrade qemu-block-glusterUpgrade qemu-block-rbdUpgrade qemu-microvmUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-guest-agentUpgrade qemu-hw-display-qxlUpgrade qemu-testsuiteUpgrade qemu-audio-alsaUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-coreUpgrade qemu-skibootUpgrade qemu-hw-usb-smartcardUpgrade qemu-langUpgrade qemu-ppcUpgrade qemu-linux-userUpgrade qemu-hw-usb-redirect | Mar 2, 2021 | Feb 25, 2021 |
| Ubuntu | — | Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu (Ubuntu Pro)Upgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-block-extra (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-utils (Ubuntu Pro)Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-system-x86-xenUpgrade qemu-kvm (Ubuntu Pro) | Mar 22, 2023 | Feb 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub