Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xenUpgrade qemu | Jul 2, 2018 | Jul 2, 2018 |
| Centos_linux | — | Upgrade kvm-debuginfoUpgrade kvm-qemu-imgUpgrade qemu-guest-agentUpgrade kvmUpgrade qemu-kvmUpgrade qemu-kvm-debuginfoUpgrade kvm-toolsUpgrade kmod-kvmUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade kmod-kvm-debugUpgrade qemu-kvm-common | Feb 26, 2017 | Feb 10, 2017 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Feb 10, 2017 |
| Freebsd | — | Upgrade xen-tools | Feb 11, 2017 | Feb 11, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/xen.Upgrade app-emulation/xen-tools.Upgrade app-emulation/qemu. | Oct 30, 2017 | Feb 21, 2017 |
| Oracle_linux | — | Upgrade kmod-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade kvm-qemu-imgUpgrade kmod-kvm-debugUpgrade kvm-toolsUpgrade qemu-imgUpgrade kvmUpgrade qemu-kvmUpgrade qemu-guest-agent | Feb 24, 2017 | Jan 24, 2017 |
| Redhat_linux | — | Upgrade kvm-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade kmod-kvmUpgrade qemu-kvm-debuginfoUpgrade qemu-guest-agentUpgrade kvm-qemu-imgNo solution existsUpgrade kmod-kvm-debugUpgrade qemu-kvm-commonUpgrade kvm-toolsUpgrade kvm | Feb 24, 2017 | Feb 10, 2017 |
| Suse | — | Upgrade qemu-block-curlUpgrade qemu-hw-display-qxlUpgrade xen-doc-pdfUpgrade qemu-hw-usb-redirectUpgrade qemu-block-iscsiUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-guest-agentUpgrade xen-tools-domuUpgrade qemu-ui-spice-appUpgrade qemu-chardev-spiceUpgrade qemu-ui-openglUpgrade qemu-ipxeUpgrade xen-libs-32bitUpgrade qemu-langUpgrade qemu-audio-spiceUpgrade qemu-block-rbdUpgrade qemu-s390xUpgrade qemu-ppcUpgrade qemu-ui-gtkUpgrade qemu-kvmUpgrade xen-develUpgrade qemu-block-sshUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-coreUpgrade xen-toolsUpgrade xen-libsUpgrade qemuUpgrade xen-kmp-paeUpgrade qemu-seabiosUpgrade xenUpgrade qemu-ui-cursesUpgrade qemu-audio-paUpgrade qemu-vgabiosUpgrade qemu-ksmUpgrade qemu-x86Upgrade xen-tools-xendomains-wait-diskUpgrade qemu-microvmUpgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-armUpgrade qemu-audio-alsaUpgrade kvmUpgrade qemu-audio-ossUpgrade qemu-s390Upgrade qemu-hw-display-virtio-gpuUpgrade qemu-skibootUpgrade qemu-sgabiosUpgrade xen-doc-html | Feb 28, 2017 | Feb 10, 2017 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-s390x | Apr 21, 2017 | Feb 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub