Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kmod-kvmUpgrade qemu-imgUpgrade xenUpgrade qemu-kvm-toolsUpgrade kvm-qemu-imgUpgrade xen-libsUpgrade qemu-kvmUpgrade kmod-kvm-debugUpgrade kvm-toolsUpgrade kvmUpgrade qemu-guest-agentUpgrade xen-devel | Dec 1, 2016 | Nov 23, 2012 |
| Debian | — | Upgrade xenUpgrade qemu | Jul 30, 2024 | Nov 23, 2012 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 6, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen.Upgrade app-emulation/pvgrub.Upgrade app-emulation/xen-tools. | Oct 30, 2017 | Nov 23, 2012 |
| Oracle_linux | — | Upgrade qemu-kvm-toolsUpgrade xen-develUpgrade xen-libsUpgrade kmod-kvmUpgrade kvm-toolsUpgrade kvmUpgrade kmod-kvm-debugUpgrade qemu-imgUpgrade kvm-qemu-imgUpgrade qemu-guest-agentUpgrade xenUpgrade qemu-kvm | Oct 16, 2024 | Nov 23, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 5, 2012 |
| Suse | — | Upgrade xen-kmp-paeUpgrade qemu-linux-userUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpuUpgrade xen-libsUpgrade qemu-block-dmgUpgrade xen-develUpgrade qemu-ivshmem-toolsUpgrade qemu-ksmUpgrade qemu-block-sshUpgrade xen-toolsUpgrade qemu-pr-helperUpgrade qemu-ipxeUpgrade xen-kmp-traceUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-vgaUpgrade xen-doc-pdfUpgrade qemu-armUpgrade qemuUpgrade qemu-block-nfsUpgrade qemu-kvmUpgrade qemu-s390Upgrade qemu-microvmUpgrade qemu-headlessUpgrade qemu-block-rbdUpgrade qemu-hw-usb-redirectUpgrade xen-kmp-defaultUpgrade qemu-x86Upgrade qemu-audio-jackUpgrade xen-tools-domUUpgrade qemu-guest-agentUpgrade qemu-extraUpgrade qemu-toolsUpgrade qemu-ppcUpgrade xen-libs-32bitUpgrade qemu-imgUpgrade qemu-audio-alsaUpgrade qemu-audio-dbusUpgrade vm-installUpgrade qemu-SLOFUpgrade qemu-sgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390xUpgrade qemu-hw-usb-hostUpgrade qemu-docUpgrade xen-doc-htmlUpgrade qemu-vhost-user-gpuUpgrade xenUpgrade qemu-hw-usb-smartcardUpgrade kvmUpgrade qemu-block-curlUpgrade qemu-vmsr-helperUpgrade qemu-vgabios | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade qemu-kvm | Nov 8, 2024 | Nov 23, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub