Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xenUpgrade qemu | Jul 2, 2018 | Jul 2, 2018 |
| Centos_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-imgUpgrade kvm-toolsUpgrade kmod-kvmUpgrade kmod-kvm-debugUpgrade qemu-kvm-debuginfoUpgrade kvm-debuginfoUpgrade kvm-qemu-imgUpgrade qemu-kvmUpgrade kvmUpgrade qemu-guest-agent | Feb 26, 2017 | Feb 10, 2017 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Feb 10, 2017 |
| Freebsd | — | Upgrade xen-tools | Feb 11, 2017 | Feb 11, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu.Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen. | Oct 30, 2017 | Feb 21, 2017 |
| Oracle_linux | — | Upgrade kmod-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade kvmUpgrade kvm-toolsUpgrade kvm-qemu-imgUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade kmod-kvm-debug | Feb 24, 2017 | Jan 24, 2017 |
| Redhat_linux | — | Upgrade qemu-kvm-debuginfoUpgrade qemu-kvmUpgrade kmod-kvmUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade kvm-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-guest-agentUpgrade kmod-kvm-debugUpgrade kvm-qemu-imgUpgrade kvm-toolsUpgrade kvmNo solution exists | Feb 24, 2017 | Feb 10, 2017 |
| Suse | — | Upgrade qemu-block-curlUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-gtkUpgrade qemu-block-sshUpgrade qemu-block-iscsiUpgrade xen-doc-pdfUpgrade qemu-block-rbdUpgrade qemu-langUpgrade qemu-chardev-baumUpgrade qemu-toolsUpgrade qemu-ui-spice-coreUpgrade xen-libsUpgrade qemu-audio-spiceUpgrade qemu-ui-openglUpgrade xen-libs-32bitUpgrade qemu-kvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-tools-domuUpgrade qemu-ppcUpgrade qemu-guest-agentUpgrade qemu-ipxeUpgrade qemu-chardev-spiceUpgrade qemu-s390xUpgrade xen-toolsUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-qxlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemuUpgrade xen-develUpgrade xen-doc-htmlUpgrade qemu-skibootUpgrade qemu-ksmUpgrade qemu-ui-cursesUpgrade qemu-seabiosUpgrade qemu-audio-ossUpgrade qemu-audio-alsaUpgrade kvmUpgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-paUpgrade qemu-microvmUpgrade qemu-s390Upgrade qemu-x86Upgrade qemu-vgabiosUpgrade xen-tools-xendomains-wait-diskUpgrade xen-kmp-paeUpgrade qemu-armUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade xen | Feb 28, 2017 | Feb 10, 2017 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-misc | Apr 21, 2017 | Feb 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub