Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xenUpgrade qemu | Jul 2, 2018 | Jul 2, 2018 |
| Centos_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-debuginfoUpgrade kvm-toolsUpgrade kmod-kvm-debugUpgrade qemu-kvm-toolsUpgrade kmod-kvmUpgrade qemu-kvm-commonUpgrade kvm-qemu-imgUpgrade qemu-kvmUpgrade kvmUpgrade kvm-debuginfoUpgrade qemu-guest-agent | Feb 26, 2017 | Feb 10, 2017 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Feb 10, 2017 |
| Freebsd | — | Upgrade xen-tools | Feb 11, 2017 | Feb 11, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu.Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen. | Oct 30, 2017 | Feb 21, 2017 |
| Oracle_linux | — | Upgrade qemu-guest-agentUpgrade kvm-qemu-imgUpgrade qemu-kvmUpgrade kvmUpgrade kmod-kvm-debugUpgrade qemu-imgUpgrade kvm-toolsUpgrade qemu-kvm-toolsUpgrade kmod-kvmUpgrade qemu-kvm-common | Feb 24, 2017 | Jan 24, 2017 |
| Redhat_linux | — | Upgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade kmod-kvmUpgrade kvm-debuginfoUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade kmod-kvm-debugNo solution existsUpgrade kvm-qemu-imgUpgrade kvmUpgrade qemu-kvm-commonUpgrade kvm-tools | Feb 24, 2017 | Feb 10, 2017 |
| Suse | — | Upgrade xenUpgrade qemu-seabiosUpgrade qemu-microvmUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-vgaUpgrade kvmUpgrade xen-doc-htmlUpgrade qemu-audio-paUpgrade qemu-s390Upgrade xen-tools-domUUpgrade qemu-armUpgrade qemu-audio-alsaUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ksmUpgrade xen-kmp-defaultUpgrade xen-tools-xendomains-wait-diskUpgrade xen-kmp-paeUpgrade qemu-x86Upgrade qemu-ui-cursesUpgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade qemu-hw-display-qxlUpgrade xen-develUpgrade qemu-chardev-spiceUpgrade xen-libsUpgrade qemuUpgrade qemu-toolsUpgrade qemu-ipxeUpgrade qemu-ppcUpgrade xen-toolsUpgrade qemu-ui-spice-appUpgrade qemu-guest-agentUpgrade qemu-chardev-baumUpgrade qemu-block-curlUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-kvmUpgrade qemu-s390xUpgrade qemu-langUpgrade xen-libs-32bitUpgrade qemu-block-iscsiUpgrade qemu-ui-openglUpgrade qemu-block-rbdUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-spiceUpgrade qemu-hw-usb-redirectUpgrade xen-doc-pdfUpgrade qemu-ui-gtkUpgrade qemu-block-sshUpgrade qemu-ui-spice-core | Feb 28, 2017 | Feb 10, 2017 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-mips | Apr 21, 2017 | Feb 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub