A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-debuginfoUpgrade qemu-kvm-coreUpgrade qemu-ui-gtkUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemuUpgrade qemu-audio-sdlUpgrade qemu-block-curlUpgrade qemu-system-x86-coreUpgrade qemu-block-sshUpgrade qemu-commonUpgrade qemu-block-nfsUpgrade qemu-imgUpgrade qemu-system-aarch64Upgrade qemu-block-rbdUpgrade qemu-user-binfmtUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86Upgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemu-user-staticUpgrade qemu-audio-paUpgrade qemu-audio-alsaUpgrade qemu-userUpgrade qemu-ui-sdlUpgrade qemu-ui-cursesUpgrade ivshmem-toolsUpgrade qemu-block-dmg | Aug 21, 2024 | Aug 21, 2024 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Jul 30, 2024 |
| Oracle_linux | — | Upgrade nbdkit-example-pluginsUpgrade nbdkit-xz-filterUpgrade libnbd-develUpgrade libguestfs-develUpgrade libguestfs-gobject-develUpgrade libiscsiUpgrade sgabios-binUpgrade hivex-develUpgrade libguestfsUpgrade libvirt-dbusUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemonUpgrade libguestfs-bash-completionUpgrade virt-dibUpgrade nbdkit-vddk-pluginUpgrade perl-Sys-VirtUpgrade libvirt-develUpgrade python3-libguestfsUpgrade libguestfs-winsupportUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade swtpm-toolsUpgrade libguestfs-java-develUpgrade python3-hivexUpgrade netcfUpgrade virt-v2v-man-pages-jaUpgrade nbdkit-nbd-pluginUpgrade libiscsi-utilsUpgrade nbdkit-bash-completionUpgrade nbdkit-gzip-pluginUpgrade libvirt-wiresharkUpgrade qemu-guest-agentUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-bash-completionUpgrade qemu-kvm-block-sshUpgrade libguestfs-tools-cUpgrade libnbdUpgrade libguestfs-benchmarkingUpgrade libtpms-develUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-kvm-block-iscsiUpgrade nbdfuseUpgrade virt-v2v-man-pages-ukUpgrade qemu-kvm-block-curlUpgrade netcf-libsUpgrade virt-v2v-bash-completionUpgrade libvirt-adminUpgrade nbdkitUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvmUpgrade libvirt-lock-sanlockUpgrade nbdkit-gzip-filterUpgrade nbdkit-tar-pluginUpgrade libguestfs-rsyncUpgrade nbdkit-curl-pluginUpgrade sgabiosUpgrade netcf-develUpgrade libnbd-bash-completionUpgrade libvirt-nssUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-serverUpgrade nbdkit-python-pluginUpgrade libvirt-docsUpgrade libguestfs-applianceUpgrade supermin-develUpgrade seabios-binUpgrade libvirt-clientUpgrade swtpm-libsUpgrade qemu-imgUpgrade perl-hivexUpgrade nbdkit-tmpdisk-pluginUpgrade nbdkit-ssh-pluginUpgrade nbdkit-basic-pluginsUpgrade nbdkit-basic-filtersUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-libsUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-interfaceUpgrade ruby-libguestfsUpgrade libguestfs-toolsUpgrade libguestfs-javadocUpgrade libtpmsUpgrade libguestfs-javaUpgrade libguestfs-inspect-iconsUpgrade libguestfs-gfs2Upgrade superminUpgrade python3-libvirtUpgrade nbdkit-tar-filterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade qemu-kvm-coreUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-coreUpgrade seavgabios-binUpgrade qemu-kvm-block-glusterUpgrade nbdkit-linuxdisk-pluginUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade libguestfs-gobjectUpgrade libvirt-daemon-kvmUpgrade libiscsi-develUpgrade python3-libnbdUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-virtiofsdUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-diskUpgrade perl-Sys-GuestfsUpgrade lua-guestfsUpgrade hivexUpgrade swtpm-develUpgrade swtpmUpgrade qemu-kvm-block-rbdUpgrade nbdkit-develUpgrade libvirt-daemon-driver-secretUpgrade libvirt-client-qemuUpgrade virt-v2vUpgrade swtpm-tools-pkcs11Upgrade seabios | Jul 22, 2024 | Apr 4, 2024 |
| Suse | — | Upgrade qemu-ipxeUpgrade qemu-accel-qtestUpgrade qemu-chardev-spiceUpgrade qemu-armUpgrade qemu-block-sshUpgrade qemu-langUpgrade qemu-ppcUpgrade qemu-ui-gtkUpgrade qemu-pr-helperUpgrade qemu-block-dmgUpgrade qemu-accel-tcg-x86Upgrade qemu-block-iscsiUpgrade qemu-ksmUpgrade qemu-headlessUpgrade qemu-seabiosUpgrade qemu-ui-openglUpgrade qemu-hw-usb-redirectUpgrade qemu-skibootUpgrade qemu-block-curlUpgrade qemu-block-glusterUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-s390Upgrade qemu-audio-ossUpgrade qemu-ui-spice-coreUpgrade qemu-spiceUpgrade qemu-audio-alsaUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-audio-spiceUpgrade qemu-ui-spice-appUpgrade qemu-extraUpgrade qemu-ui-cursesUpgrade qemuUpgrade qemu-ivshmem-toolsUpgrade qemu-audio-pipewireUpgrade qemu-x86Upgrade qemu-linux-userUpgrade qemu-hw-usb-hostUpgrade qemu-hw-usb-smartcardUpgrade qemu-toolsUpgrade qemu-vgabiosUpgrade qemu-imgUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-jackUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-dbusUpgrade qemu-ui-dbusUpgrade qemu-microvmUpgrade qemu-block-nfsUpgrade qemu-audio-sdlUpgrade qemu-kvmUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-docUpgrade qemu-sgabiosUpgrade qemu-s390xUpgrade qemu-SLOFUpgrade qemu-hw-display-qxlUpgrade qemu-chardev-baumUpgrade qemu-vhost-user-gpuUpgrade qemu-ui-sdlUpgrade qemu-vmsr-helper | Apr 24, 2024 | Apr 23, 2024 |
| Ubuntu | — | Upgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-system-data (Ubuntu Pro)Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-system-x86-xenUpgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system-x86-microvm (Ubuntu Pro)Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-system-gui (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-block-extra (Ubuntu Pro)Upgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-x86-xen (Ubuntu Pro)Upgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system-xenUpgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-system-mips | Nov 19, 2024 | Nov 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub