Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xenUpgrade qemu | Jul 2, 2018 | Jul 2, 2018 |
| Centos_linux | — | Upgrade qemu-kvm-toolsUpgrade kmod-kvm-debugUpgrade kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-commonUpgrade kmod-kvmUpgrade kvm-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade kvm-qemu-imgUpgrade kvm | Feb 26, 2017 | Feb 10, 2017 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Feb 10, 2017 |
| Freebsd | — | Upgrade xen-tools | Feb 11, 2017 | Feb 11, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen.Upgrade app-emulation/qemu. | Oct 30, 2017 | Feb 21, 2017 |
| Oracle_linux | — | Upgrade kvm-toolsUpgrade kmod-kvm-debugUpgrade qemu-guest-agentUpgrade qemu-imgUpgrade kvm-qemu-imgUpgrade qemu-kvmUpgrade kvmUpgrade kmod-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-common | Feb 24, 2017 | Jan 24, 2017 |
| Redhat_linux | — | Upgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade kmod-kvmUpgrade qemu-kvmUpgrade kvm-debuginfoUpgrade qemu-imgUpgrade kmod-kvm-debugUpgrade qemu-guest-agentNo solution existsUpgrade kvm-qemu-imgUpgrade kvm-toolsUpgrade kvmUpgrade qemu-kvm-common | Feb 24, 2017 | Feb 10, 2017 |
| Suse | — | Upgrade xen-doc-pdfUpgrade qemu-toolsUpgrade qemu-block-sshUpgrade qemu-ipxeUpgrade qemu-ppcUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-coreUpgrade qemu-guest-agentUpgrade qemu-block-curlUpgrade qemu-chardev-baumUpgrade qemu-block-rbdUpgrade xen-develUpgrade qemu-ui-spice-appUpgrade xen-toolsUpgrade xen-libsUpgrade qemu-ui-gtkUpgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-chardev-spiceUpgrade xen-libs-32bitUpgrade qemu-kvmUpgrade qemuUpgrade qemu-hw-display-qxlUpgrade qemu-s390xUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-openglUpgrade qemu-langUpgrade qemu-block-iscsiUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-sgabiosUpgrade xenUpgrade qemu-ui-cursesUpgrade qemu-skibootUpgrade xen-tools-domUUpgrade xen-kmp-defaultUpgrade xen-doc-htmlUpgrade qemu-s390Upgrade qemu-audio-ossUpgrade kvmUpgrade qemu-audio-alsaUpgrade qemu-hw-display-virtio-gpuUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-ksmUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade qemu-armUpgrade qemu-seabiosUpgrade xen-kmp-paeUpgrade qemu-microvm | Feb 28, 2017 | Feb 10, 2017 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-ppc | Apr 21, 2017 | Feb 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub