A heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-block-dmgUpgrade qemu-ui-sdlUpgrade qemu-userUpgrade qemu-system-x86Upgrade ivshmem-toolsUpgrade qemu-audio-ossUpgrade qemu-system-aarch64-coreUpgrade qemu-audio-alsaUpgrade qemu-ui-cursesUpgrade qemu-block-iscsiUpgrade qemu-user-staticUpgrade qemu-audio-paUpgrade qemu-system-x86-coreUpgrade qemu-block-sshUpgrade qemu-imgUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-audio-sdlUpgrade qemu-block-nfsUpgrade qemu-user-binfmtUpgrade qemu-commonUpgrade qemu-ui-gtkUpgrade qemu-kvmUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64Upgrade qemu-guest-agentUpgrade qemu-debuginfoUpgrade qemu-block-curl | Aug 21, 2024 | Aug 21, 2024 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Jul 30, 2024 |
| Oracle_linux | — | Upgrade libvirt-daemon-config-nwfilterUpgrade lua-guestfsUpgrade qemu-virtiofsdUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-diskUpgrade hivexUpgrade nbdkit-develUpgrade swtpm-develUpgrade netcf-develUpgrade perl-Sys-GuestfsUpgrade libvirt-nssUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-coreUpgrade seavgabios-binUpgrade libnbd-bash-completionUpgrade libguestfs-gobjectUpgrade swtpmUpgrade libvirtUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade seabios-binUpgrade libvirt-daemon-driver-storage-logicalUpgrade supermin-develUpgrade superminUpgrade libguestfs-javaUpgrade libguestfs-applianceUpgrade sgabiosUpgrade python3-libvirtUpgrade libguestfs-gfs2Upgrade nbdkit-tar-filterUpgrade libguestfs-inspect-iconsUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libtpmsUpgrade libguestfs-javadocUpgrade libiscsi-develUpgrade libvirt-daemon-kvmUpgrade libvirt-libsUpgrade python3-libnbdUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-scsiUpgrade swtpm-libsUpgrade perl-hivexUpgrade ruby-libguestfsUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-daemon-driver-interfaceUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-serverUpgrade swtpm-tools-pkcs11Upgrade nbdkit-ssh-pluginUpgrade libvirt-docsUpgrade libvirt-daemon-driver-secretUpgrade virt-v2vUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-python-pluginUpgrade qemu-kvm-block-rbdUpgrade libvirt-client-qemuUpgrade seabiosUpgrade nbdkit-basic-filtersUpgrade nbdkit-linuxdisk-pluginUpgrade libguestfs-java-develUpgrade libvirt-adminUpgrade swtpm-toolsUpgrade libguestfs-rescueUpgrade virt-v2v-man-pages-jaUpgrade libvirt-develUpgrade nbdkit-vddk-pluginUpgrade nbdkitUpgrade libguestfs-develUpgrade qemu-kvmUpgrade nbdkit-xz-filterUpgrade libnbd-develUpgrade virt-v2v-man-pages-ukUpgrade python3-hivexUpgrade nbdkit-curl-pluginUpgrade libvirt-dbusUpgrade nbdfuseUpgrade libiscsiUpgrade nbdkit-example-pluginsUpgrade libguestfs-gobject-develUpgrade libguestfs-bash-completionUpgrade libvirt-daemonUpgrade libnbdUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-config-networkUpgrade libvirt-bash-completionUpgrade libguestfs-tools-cUpgrade libguestfs-man-pages-jaUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-block-sshUpgrade qemu-guest-agentUpgrade nbdkit-gzip-pluginUpgrade nbdkit-bash-completionUpgrade libvirt-wiresharkUpgrade sgabios-binUpgrade virt-dibUpgrade virt-v2v-bash-completionUpgrade qemu-kvm-block-curlUpgrade libtpms-develUpgrade nbdkit-nbd-pluginUpgrade libiscsi-utilsUpgrade perl-Sys-VirtUpgrade libguestfs-man-pages-ukUpgrade libguestfsUpgrade hivex-develUpgrade libguestfs-winsupportUpgrade netcf-libsUpgrade netcfUpgrade qemu-kvm-block-iscsiUpgrade python3-libguestfsUpgrade nbdkit-tar-pluginUpgrade nbdkit-gzip-filterUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-iscsi-direct | Jul 22, 2024 | Apr 4, 2024 |
| Suse | — | Upgrade qemu-extraUpgrade qemu-hw-usb-hostUpgrade qemu-vmsr-helperUpgrade qemu-linux-userUpgrade qemu-block-nfsUpgrade qemu-ui-sdlUpgrade qemu-vhost-user-gpuUpgrade qemu-SLOFUpgrade qemu-chardev-baumUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-sgabiosUpgrade qemu-kvmUpgrade qemuUpgrade qemu-microvmUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-sdlUpgrade qemu-hw-usb-smartcardUpgrade qemu-docUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-dbusUpgrade qemu-vgabiosUpgrade qemu-audio-jackUpgrade qemu-ui-dbusUpgrade qemu-hw-display-qxlUpgrade qemu-x86Upgrade qemu-ivshmem-toolsUpgrade qemu-audio-pipewireUpgrade qemu-imgUpgrade qemu-toolsUpgrade qemu-s390xUpgrade qemu-ui-spice-coreUpgrade qemu-hw-usb-redirectUpgrade qemu-block-curlUpgrade qemu-audio-ossUpgrade qemu-seabiosUpgrade qemu-audio-spiceUpgrade qemu-accel-tcg-x86Upgrade qemu-block-iscsiUpgrade qemu-chardev-spiceUpgrade qemu-ipxeUpgrade qemu-ppcUpgrade qemu-skibootUpgrade qemu-s390Upgrade qemu-hw-display-virtio-vgaUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-audio-alsaUpgrade qemu-spiceUpgrade qemu-ui-spice-appUpgrade qemu-ui-openglUpgrade qemu-armUpgrade qemu-ui-gtkUpgrade qemu-accel-qtestUpgrade qemu-ksmUpgrade qemu-block-sshUpgrade qemu-langUpgrade qemu-pr-helperUpgrade qemu-headlessUpgrade qemu-block-dmgUpgrade qemu-block-gluster | Apr 24, 2024 | Apr 23, 2024 |
| Ubuntu | — | Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu (Ubuntu Pro)Upgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-system-data (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-system-x86-xenUpgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-x86-microvm (Ubuntu Pro)Upgrade qemu-system-x86-xen (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-xenUpgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-gui (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-block-extra (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-common (Ubuntu Pro) | Nov 19, 2024 | Nov 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub