The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade qemu-kvm | Dec 22, 2017 | Oct 16, 2017 |
| Centos_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfoUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-kvm | Dec 7, 2017 | Oct 16, 2017 |
| Debian | — | Upgrade qemu | May 31, 2018 | Oct 16, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Jan 18, 2018 | Oct 16, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Jan 18, 2018 | Oct 16, 2017 |
| Oracle_linux | — | Upgrade qemu-guest-agentUpgrade qemu-block-iscsiUpgrade ivshmem-toolsUpgrade qemu-kvm-commonUpgrade qemu-system-x86Upgrade qemu-system-aarch64-coreUpgrade qemu-system-x86-coreUpgrade qemu-kvmUpgrade qemu-block-rbdUpgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemuUpgrade qemu-kvm-coreUpgrade qemu-commonUpgrade qemu-kvm-toolsUpgrade qemu-block-gluster | Dec 1, 2017 | Oct 11, 2017 |
| Redhat_linux | — | No solution existsUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-guest-agentUpgrade qemu-img | Dec 1, 2017 | Oct 16, 2017 |
| Suse | — | Upgrade xenUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-kmp-paeUpgrade qemu-ui-gtkUpgrade qemu-seabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-ksmUpgrade qemu-kvmUpgrade qemu-audio-alsaUpgrade qemu-vgabiosUpgrade qemu-chardev-baumUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-coreUpgrade qemu-audio-paUpgrade qemu-s390Upgrade qemu-x86Upgrade qemu-sgabiosUpgrade xen-tools-domUUpgrade qemu-block-curlUpgrade qemu-ppcUpgrade qemu-ui-cursesUpgrade qemu-guest-agentUpgrade qemu-microvmUpgrade xen-doc-htmlUpgrade qemu-ipxeUpgrade xen-libs-32bitUpgrade qemu-ui-openglUpgrade xen-libsUpgrade qemuUpgrade qemu-ui-spice-appUpgrade xen-doc-pdfUpgrade qemu-block-rbdUpgrade qemu-hw-display-qxlUpgrade qemu-audio-ossUpgrade qemu-langUpgrade qemu-chardev-spiceUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpuUpgrade xen-kmp-defaultUpgrade qemu-s390xUpgrade kvmUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-skibootUpgrade xen-develUpgrade xen-toolsUpgrade qemu-armUpgrade qemu-audio-spice | Nov 2, 2017 | Oct 16, 2017 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-system-misc | Feb 21, 2018 | Oct 16, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub