An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.
CVSS Details
- CVSS 3.1 Base Score: 5.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfo | May 10, 2017 | Apr 20, 2017 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Oct 11, 2019 | Jul 27, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Oct 11, 2019 | Jul 27, 2018 |
| Oracle_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-system-aarch64-coreUpgrade qemu-system-aarch64Upgrade qemu-block-glusterUpgrade qemu-system-x86Upgrade ivshmem-toolsUpgrade qemu-block-iscsiUpgrade qemuUpgrade qemu-commonUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-system-x86-coreUpgrade qemu-kvm-coreUpgrade qemu-block-rbd | May 9, 2017 | Dec 1, 2016 |
| Redhat_linux | — | Upgrade qemu-kvm-debuginfoNo solution existsUpgrade qemu-guest-agentUpgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-tools | May 9, 2017 | Apr 20, 2017 |
| Suse | — | Upgrade xen-kmp-paeUpgrade xen-toolsUpgrade qemu-toolsUpgrade qemu-seabiosUpgrade qemu-hw-display-qxlUpgrade qemu-ui-gtkUpgrade qemu-chardev-spiceUpgrade qemu-ksmUpgrade qemu-audio-paUpgrade qemu-skibootUpgrade qemu-ipxeUpgrade xen-develUpgrade qemu-armUpgrade qemu-ppcUpgrade qemu-s390xUpgrade qemu-ui-spice-appUpgrade qemu-audio-spiceUpgrade qemu-ui-openglUpgrade qemu-guest-agentUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-coreUpgrade qemu-block-curlUpgrade qemu-block-rbdUpgrade qemu-audio-alsaUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-langUpgrade xen-libs-32bitUpgrade qemu-block-iscsiUpgrade qemu-block-sshUpgrade qemu-kvmUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpuUpgrade qemuUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-vgabiosUpgrade xen-tools-domUUpgrade xen-libsUpgrade xenUpgrade qemu-s390Upgrade qemu-x86Upgrade kvmUpgrade xen-kmp-defaultUpgrade xen-doc-htmlUpgrade qemu-audio-ossUpgrade qemu-microvmUpgrade qemu-chardev-baum | Apr 20, 2017 | Apr 20, 2017 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-sparc | Apr 21, 2017 | Apr 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub