In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfo | Aug 2, 2019 | Feb 15, 2019 |
| Debian | — | Upgrade qemuUpgrade slirp4netns | Mar 12, 2019 | Mar 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Nov 19, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-kvmUpgrade qemu-block-glusterUpgrade qemu-audio-sdlUpgrade qemu-ui-cursesUpgrade qemu-block-nfsUpgrade qemu-system-aarch64Upgrade qemu-commonUpgrade qemu-imgUpgrade qemu-ui-sdlUpgrade qemu-ui-gtkUpgrade qemu-audio-alsaUpgrade qemu-block-sshUpgrade qemu-audio-paUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-system-aarch64-coreUpgrade qemu-block-dmgUpgrade qemu-audio-ossUpgrade qemu-block-iscsi | Aug 28, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade ivshmem-toolsUpgrade qemu-system-aarch64Upgrade qemu-kvm-commonUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-block-glusterUpgrade qemuUpgrade qemu-commonUpgrade qemu-system-x86-coreUpgrade qemu-kvm-toolsUpgrade qemu-block-iscsiUpgrade qemu-system-x86Upgrade qemu-system-aarch64-coreUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-core | May 15, 2019 | Jan 11, 2019 |
| Redhat_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade qemu-kvmNo solution existsUpgrade qemu-guest-agent | Jul 30, 2019 | Mar 21, 2019 |
| Suse | — | Upgrade qemu-hw-display-virtio-gpu-pciUpgrade podmanUpgrade qemu-hw-usb-redirectUpgrade qemu-toolsUpgrade qemu-audio-spiceUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-microvmUpgrade qemu-langUpgrade xenUpgrade xen-libs-32bitUpgrade qemu-ppcUpgrade xen-tools-domUUpgrade xen-toolsUpgrade qemuUpgrade xen-doc-htmlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-guest-agentUpgrade fuse-overlayfsUpgrade libcontainers-commonUpgrade qemu-block-sshUpgrade qemu-sgabiosUpgrade qemu-extraUpgrade podman-cni-configUpgrade kvmUpgrade qemu-chardev-baumUpgrade qemu-s390xUpgrade qemu-kvmUpgrade qemu-audio-sdlUpgrade qemu-block-nfsUpgrade qemu-vgabiosUpgrade qemu-ipxeUpgrade fuse3-docUpgrade fuse3-develUpgrade qemu-hw-display-qxlUpgrade qemu-x86Upgrade xen-develUpgrade libfuse3-3Upgrade qemu-block-glusterUpgrade qemu-ui-spice-coreUpgrade qemu-ui-spice-appUpgrade qemu-chardev-spiceUpgrade qemu-ui-gtkUpgrade qemu-skibootUpgrade qemu-block-dmgUpgrade qemu-audio-alsaUpgrade xen-libsUpgrade qemu-s390Upgrade qemu-ui-sdlUpgrade qemu-audio-paUpgrade qemu-block-iscsiUpgrade qemu-ui-openglUpgrade qemu-testsuiteUpgrade xen-kmp-paeUpgrade fuse3Upgrade qemu-ui-cursesUpgrade xen-kmp-defaultUpgrade qemu-armUpgrade qemu-audio-ossUpgrade qemu-block-curlUpgrade qemu-linux-userUpgrade slirp4netnsUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ksm | Feb 16, 2019 | Feb 15, 2019 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-guiUpgrade qemu-system-aarch64Upgrade qemu-system-dataUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system | Apr 3, 2019 | Feb 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub