Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvm-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-img | Sep 27, 2019 | Oct 16, 2018 |
| Debian | — | Upgrade qemu | Nov 12, 2018 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Nov 19, 2019 | Oct 16, 2018 |
| Oracle_linux | — | Upgrade qemu-block-rbdUpgrade qemu-block-glusterUpgrade qemu-guest-agentUpgrade qemuUpgrade ivshmem-toolsUpgrade qemu-commonUpgrade qemu-system-x86-coreUpgrade qemu-system-x86Upgrade qemu-block-iscsiUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-system-aarch64-coreUpgrade qemu-system-aarch64Upgrade qemu-kvm-core | Oct 30, 2018 | Sep 26, 2018 |
| Redhat_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-guest-agentNo solution exists | Sep 25, 2019 | Oct 16, 2018 |
| Suse | — | Upgrade qemu-block-dmgUpgrade kvmUpgrade qemu-chardev-spiceUpgrade qemu-sgabiosUpgrade qemu-extraUpgrade qemu-audio-spiceUpgrade xen-kmp-defaultUpgrade qemu-skibootUpgrade qemu-ui-openglUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-virtio-gpuUpgrade xen-toolsUpgrade qemu-armUpgrade xen-doc-htmlUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-spice-appUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-ipxeUpgrade qemu-block-sshUpgrade xen-libsUpgrade qemu-hw-display-qxlUpgrade xen-libs-32bitUpgrade xenUpgrade qemu-langUpgrade qemu-vgabiosUpgrade qemu-block-glusterUpgrade qemu-block-curlUpgrade qemu-block-iscsiUpgrade qemu-audio-paUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-spice-coreUpgrade qemu-toolsUpgrade qemu-ui-gtkUpgrade qemu-x86Upgrade qemu-kvmUpgrade qemu-audio-alsaUpgrade qemu-linux-userUpgrade xen-tools-domUUpgrade qemu-seabiosUpgrade qemu-microvmUpgrade qemu-chardev-baumUpgrade qemu-s390Upgrade qemu-testsuiteUpgrade qemu-ppcUpgrade qemu-hw-usb-redirectUpgrade xen-kmp-paeUpgrade xen-develUpgrade qemu-ksmUpgrade qemu-guest-agentUpgrade qemu-audio-oss | Nov 27, 2018 | Oct 16, 2018 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-s390x | Nov 30, 2018 | Oct 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub