qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possibly have unspecified other impact.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvm-tools-maUpgrade qemu-kvm-common-maUpgrade qemu-kvm-maUpgrade qemu-img-maUpgrade qemu-kvm-ma-debuginfo | Aug 28, 2019 | Oct 9, 2018 |
| Debian | — | Upgrade qemu | Nov 12, 2018 | Oct 9, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Oct 9, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | Oct 9, 2018 |
| Oracle_linux | — | Upgrade qemuUpgrade qemu-commonUpgrade qemu-block-rbdUpgrade qemu-system-x86-coreUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade ivshmem-toolsUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64Upgrade qemu-block-glusterUpgrade qemu-imgUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86 | Oct 30, 2018 | May 21, 2018 |
| Redhat_linux | — | Upgrade qemu-img-maUpgrade qemu-kvm-maUpgrade qemu-kvm-common-maUpgrade qemu-kvm-tools-maNo solution existsUpgrade qemu-kvm-ma-debuginfo | Aug 7, 2019 | Oct 9, 2018 |
| Suse | — | Upgrade xen-toolsUpgrade qemu-linux-userUpgrade qemu-guest-agentUpgrade qemu-block-sshUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade qemu-armUpgrade qemu-langUpgrade qemu-block-rbdUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade kvmUpgrade qemu-ui-openglUpgrade qemu-audio-ossUpgrade qemu-microvmUpgrade qemu-ppcUpgrade qemu-ui-spice-coreUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade qemu-s390xUpgrade qemu-audio-paUpgrade xen-develUpgrade qemu-block-glusterUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-kmp-paeUpgrade qemu-skibootUpgrade qemu-ipxeUpgrade qemu-extraUpgrade xen-doc-htmlUpgrade xen-kmp-defaultUpgrade qemu-chardev-spiceUpgrade qemu-block-iscsiUpgrade qemu-s390Upgrade xen-tools-domUUpgrade qemu-ui-cursesUpgrade qemu-block-dmgUpgrade qemu-chardev-baumUpgrade qemu-vgabiosUpgrade qemu-ui-gtkUpgrade qemu-x86Upgrade qemu-kvmUpgrade qemu-audio-alsaUpgrade qemu-block-curlUpgrade xenUpgrade qemu-ksmUpgrade qemu-audio-spiceUpgrade qemu-seabiosUpgrade qemu-testsuiteUpgrade xen-libsUpgrade xen-libs-32bit | Oct 24, 2018 | Oct 9, 2018 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-misc | Nov 30, 2018 | Oct 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub