m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-tools | Apr 27, 2020 | Jun 13, 2018 |
| Amazon_linux | — | Upgrade qemu-kvm | Sep 7, 2018 | Jun 13, 2018 |
| Centos_linux | — | Upgrade qemu-guest-agentUpgrade qemu-imgUpgrade qemu-kvm-common-maUpgrade qemu-kvmUpgrade qemu-kvm-ma-debuginfoUpgrade qemu-kvm-maUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-tools-maUpgrade qemu-img-maUpgrade qemu-kvm-common | Aug 22, 2018 | Jun 13, 2018 |
| Debian | — | Upgrade qemu | May 10, 2019 | Jun 13, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Sep 27, 2018 | Jun 13, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Sep 27, 2018 | Jun 13, 2018 |
| Oracle_linux | — | Upgrade qemu-block-rbdUpgrade qemu-system-aarch64Upgrade qemu-guest-agentUpgrade qemuUpgrade qemu-kvmUpgrade qemu-commonUpgrade qemu-block-glusterUpgrade ivshmem-toolsUpgrade qemu-system-x86-coreUpgrade qemu-kvm-coreUpgrade qemu-kvm-commonUpgrade qemu-system-aarch64-coreUpgrade qemu-imgUpgrade qemu-block-iscsiUpgrade qemu-kvm-toolsUpgrade qemu-system-x86 | Aug 17, 2018 | Jun 5, 2018 |
| Redhat_linux | — | Upgrade qemu-img-maUpgrade qemu-kvm-commonUpgrade qemu-kvm-tools-maUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-ma-debuginfoUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-kvm-maUpgrade qemu-imgNo solution existsUpgrade qemu-kvm-toolsUpgrade qemu-kvm-common-ma | Aug 17, 2018 | Jun 13, 2018 |
| Suse | — | Upgrade qemu-ipxeUpgrade qemu-ui-gtkUpgrade qemu-seabiosUpgrade qemu-s390Upgrade xen-libsUpgrade qemu-chardev-spiceUpgrade qemu-ksmUpgrade qemu-audio-paUpgrade qemu-block-iscsiUpgrade qemu-block-sshUpgrade xen-kmp-defaultUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-appUpgrade xen-kmp-paeUpgrade qemu-ui-openglUpgrade qemu-block-dmgUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-armUpgrade qemu-langUpgrade qemu-ui-spice-coreUpgrade qemu-extraUpgrade qemu-testsuiteUpgrade qemu-ui-cursesUpgrade qemu-skibootUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-linux-userUpgrade xen-libs-32bitUpgrade qemu-s390xUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade qemu-hw-display-qxlUpgrade qemu-sgabiosUpgrade xenUpgrade qemu-microvmUpgrade qemu-ppcUpgrade qemu-block-glusterUpgrade xen-develUpgrade qemu-chardev-baumUpgrade xen-tools-domUUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-doc-pdfUpgrade qemu-guest-agentUpgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-doc-htmlUpgrade qemu-kvmUpgrade qemu-toolsUpgrade xen-toolsUpgrade qemuUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-rbdUpgrade kvm | Jul 24, 2018 | Jun 13, 2018 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-s390x | Nov 30, 2018 | Jun 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub