Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to cause a denial of service (QEMU instance crash) by leveraging failure to properly clear ifq_so from pending packets.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm-debuginfo | Apr 27, 2020 | Sep 1, 2017 |
| Amazon_linux | — | Upgrade qemu-kvm | Jun 12, 2018 | Sep 1, 2017 |
| Centos_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvm | Aug 28, 2019 | Sep 1, 2017 |
| Debian | — | Upgrade qemu | Dec 5, 2017 | Sep 1, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | May 29, 2018 | Sep 1, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | May 3, 2018 | Sep 1, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Jul 3, 2018 | Sep 1, 2017 |
| Oracle_linux | — | Upgrade qemu-commonUpgrade qemu-block-rbdUpgrade ivshmem-toolsUpgrade qemuUpgrade qemu-block-iscsiUpgrade qemu-kvm-commonUpgrade qemu-system-x86-coreUpgrade qemu-block-glusterUpgrade qemu-system-x86Upgrade qemu-kvm-toolsUpgrade qemu-system-aarch64-coreUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-kvm-coreUpgrade qemu-img | Apr 19, 2018 | Aug 3, 2017 |
| Redhat_linux | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsNo solution existsUpgrade qemu-img | Apr 11, 2018 | Sep 1, 2017 |
| Suse | — | Upgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-gpuUpgrade qemuUpgrade qemu-x86Upgrade qemu-toolsUpgrade qemu-skibootUpgrade qemu-hw-display-qxlUpgrade qemu-ui-cursesUpgrade qemu-armUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-spice-appUpgrade qemu-sgabiosUpgrade qemu-ui-spice-coreUpgrade qemu-audio-ossUpgrade qemu-ppcUpgrade qemu-guest-agentUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-paUpgrade qemu-ipxeUpgrade qemu-audio-spiceUpgrade qemu-block-rbdUpgrade qemu-s390xUpgrade qemu-seabiosUpgrade qemu-s390Upgrade qemu-vgabiosUpgrade qemu-microvmUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade qemu-audio-alsaUpgrade qemu-ksmUpgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-block-sshUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-chardev-spice | Nov 2, 2017 | Sep 1, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub