A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-block-rbdUpgrade qemu-kvm-coreUpgrade qemu-block-sshUpgrade qemu-userUpgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-system-aarch64-coreUpgrade qemu-ui-gtkUpgrade qemu-guest-agentUpgrade qemu-block-curlUpgrade qemu-audio-sdlUpgrade qemu-block-dmgUpgrade qemu-imgUpgrade qemu-debuginfoUpgrade qemu-user-staticUpgrade qemu-kvmUpgrade qemuUpgrade qemu-user-binfmtUpgrade qemu-ui-sdlUpgrade qemu-commonUpgrade qemu-ui-cursesUpgrade qemu-audio-ossUpgrade qemu-audio-paUpgrade qemu-block-nfsUpgrade qemu-system-x86Upgrade qemu-system-x86-coreUpgrade ivshmem-toolsUpgrade qemu-system-aarch64 | Aug 24, 2023 | Aug 3, 2023 |
| Debian | — | Upgrade qemu | Oct 10, 2023 | Aug 3, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade qemu-img | Jan 10, 2024 | Aug 3, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 10, 2024 | Aug 3, 2023 |
| Oracle_linux | — | Upgrade nbdkit-example-pluginsUpgrade qemu-system-aarch64-coreUpgrade libguestfs-applianceUpgrade libguestfs-javaUpgrade libvirt-nssUpgrade nbdkit-linuxdisk-pluginUpgrade swtpm-toolsUpgrade libvirt-daemon-driver-storage-logicalUpgrade virt-v2v-man-pages-ukUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storageUpgrade swtpm-tools-pkcs11Upgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-diskUpgrade seabios-binUpgrade qemu-virtiofsdUpgrade ruby-libguestfsUpgrade nbdkit-nbd-pluginUpgrade nbdkit-tar-pluginUpgrade qemu-block-rbdUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-kvmUpgrade python3-libvirtUpgrade libguestfs-gobject-develUpgrade libguestfs-inspect-iconsUpgrade libvirt-dbusUpgrade libtpms-develUpgrade qemu-kvm-block-curlUpgrade libvirt-lock-sanlockUpgrade nbdkit-gzip-pluginUpgrade libvirt-daemon-driver-nwfilterUpgrade nbdkit-gzip-filterUpgrade qemu-system-x86-coreUpgrade python3-libnbdUpgrade libvirt-daemon-driver-storage-glusterUpgrade supermin-develUpgrade virt-dibUpgrade qemu-kvm-coreUpgrade nbdkit-curl-pluginUpgrade qemu-imgUpgrade libnbd-bash-completionUpgrade qemu-commonUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdfuseUpgrade libvirt-bash-completionUpgrade nbdkit-develUpgrade qemu-kvmUpgrade hivexUpgrade libguestfs-benchmarkingUpgrade netcf-libsUpgrade libnbdUpgrade libvirt-daemon-driver-secretUpgrade hivex-develUpgrade libguestfsUpgrade qemu-guest-agentUpgrade seabiosUpgrade libvirt-daemon-driver-storage-mpathUpgrade swtpm-libsUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-block-sshUpgrade libtpmsUpgrade libvirt-clientUpgrade libiscsiUpgrade libguestfs-winsupportUpgrade libiscsi-utilsUpgrade swtpmUpgrade libvirtUpgrade libguestfs-toolsUpgrade libguestfs-bash-completionUpgrade nbdkit-basic-filtersUpgrade qemu-block-glusterUpgrade libvirt-adminUpgrade libvirt-daemonUpgrade libguestfs-rescueUpgrade nbdkit-xz-filterUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade swtpm-develUpgrade nbdkit-tar-filterUpgrade libvirt-daemon-config-networkUpgrade seavgabios-binUpgrade virt-v2vUpgrade nbdkit-ssh-pluginUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-config-nwfilterUpgrade superminUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-serverUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-client-qemuUpgrade libguestfs-xfsUpgrade virt-v2v-bash-completionUpgrade qemu-block-iscsiUpgrade libnbd-develUpgrade qemu-kvm-block-iscsiUpgrade perl-Sys-VirtUpgrade nbdkit-bash-completionUpgrade libguestfs-java-develUpgrade netcf-develUpgrade netcfUpgrade libguestfs-man-pages-ukUpgrade sgabios-binUpgrade libvirt-develUpgrade libguestfs-tools-cUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-interfaceUpgrade nbdkit-python-pluginUpgrade python3-libguestfsUpgrade libiscsi-develUpgrade virt-v2v-man-pages-jaUpgrade qemu-system-x86Upgrade libvirt-docsUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-block-rbdUpgrade python3-hivexUpgrade qemu-kvm-commonUpgrade perl-hivexUpgrade qemu-system-aarch64Upgrade nbdkitUpgrade libguestfs-develUpgrade nbdkit-vddk-pluginUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-wiresharkUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-gfs2Upgrade ivshmem-toolsUpgrade sgabiosUpgrade ruby-hivexUpgrade qemuUpgrade perl-Sys-Guestfs | Sep 23, 2023 | Aug 3, 2023 |
| Suse | — | Upgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-kvmUpgrade qemu-block-dmgUpgrade qemuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-glusterUpgrade qemu-block-nfsUpgrade qemu-ivshmem-toolsUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-x86Upgrade qemu-toolsUpgrade qemu-vgabiosUpgrade qemu-SLOFUpgrade qemu-vhost-user-gpuUpgrade qemu-ui-cursesUpgrade qemu-ui-dbusUpgrade qemu-ui-sdlUpgrade qemu-armUpgrade qemu-audio-sdlUpgrade qemu-hw-usb-hostUpgrade qemu-ipxeUpgrade qemu-ui-openglUpgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade qemu-audio-jackUpgrade qemu-ksmUpgrade qemu-accel-tcg-x86Upgrade qemu-extraUpgrade qemu-audio-spiceUpgrade qemu-block-curlUpgrade qemu-guest-agentUpgrade qemu-ui-spice-appUpgrade qemu-hw-usb-redirectUpgrade qemu-langUpgrade qemu-chardev-baumUpgrade qemu-audio-ossUpgrade qemu-ui-spice-coreUpgrade qemu-ppcUpgrade qemu-chardev-spiceUpgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-hw-usb-smartcardUpgrade qemu-seabiosUpgrade qemu-s390xUpgrade qemu-microvmUpgrade qemu-accel-qtestUpgrade qemu-s390Upgrade qemu-ui-gtkUpgrade qemu-block-sshUpgrade qemu-audio-dbusUpgrade qemu-skiboot | Aug 29, 2023 | Aug 3, 2023 |
| Ubuntu | — | Upgrade qemu-utils (Ubuntu Pro)Upgrade qemu-block-extra (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-x86-xenUpgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-system-x86-microvmUpgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-xenUpgrade qemuUpgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-kvm (Ubuntu Pro)Upgrade qemu (Ubuntu Pro) | Jan 9, 2024 | Aug 3, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub