qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishandling of the seccomp policy for threads other than the main thread.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade qemu-kvm | Nov 18, 2020 | Aug 29, 2018 |
| Centos_linux | — | Upgrade qemu-kvm-tools-maUpgrade qemu-kvm-commonUpgrade qemu-kvm-common-maUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-maUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm-ma-debuginfoUpgrade qemu-kvmUpgrade qemu-img-ma | Oct 1, 2020 | Aug 29, 2018 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Aug 29, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Dec 4, 2019 | Aug 29, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Apr 16, 2020 | Aug 29, 2018 |
| Oracle_linux | — | Upgrade qemu-system-aarch64-coreUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade ivshmem-toolsUpgrade qemu-system-x86Upgrade qemu-commonUpgrade qemu-block-iscsiUpgrade qemu-block-glusterUpgrade qemu-imgUpgrade qemuUpgrade qemu-system-aarch64Upgrade qemu-kvm-coreUpgrade qemu-system-x86-coreUpgrade qemu-kvm-toolsUpgrade qemu-block-rbd | Oct 30, 2018 | Aug 13, 2018 |
| Redhat_linux | — | Upgrade qemu-kvm-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-img-maUpgrade qemu-kvmUpgrade qemu-kvm-common-maUpgrade qemu-kvm-ma-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-maUpgrade qemu-kvm-toolsUpgrade qemu-kvm-tools-ma | Oct 1, 2020 | Aug 29, 2018 |
| Suse | — | Upgrade qemu-langUpgrade qemu-guest-agentUpgrade qemu-ksmUpgrade qemu-ui-openglUpgrade qemu-audio-ossUpgrade qemu-ppcUpgrade qemu-chardev-spiceUpgrade qemu-audio-alsaUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ipxeUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-appUpgrade qemu-audio-spiceUpgrade qemu-testsuiteUpgrade qemu-ui-spice-coreUpgrade qemu-seabiosUpgrade qemu-block-rbdUpgrade qemu-block-dmgUpgrade qemu-armUpgrade qemu-block-glusterUpgrade qemu-skibootUpgrade qemu-s390xUpgrade qemu-block-sshUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-vgabiosUpgrade qemu-ui-cursesUpgrade qemu-sgabiosUpgrade qemu-hw-display-qxlUpgrade qemu-extraUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-toolsUpgrade qemu-microvmUpgrade qemu-ui-gtkUpgrade qemuUpgrade qemu-block-curlUpgrade qemu-hw-usb-redirectUpgrade qemu-kvmUpgrade qemu-s390Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-chardev-baumUpgrade qemu-x86Upgrade qemu-linux-userUpgrade kvm | Nov 27, 2018 | Aug 29, 2018 |
| Ubuntu | — | Upgrade qemu | Nov 19, 2024 | Aug 29, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub