QEMU 0.8.2 allows local users to crash a virtual machine via the divisor operand to the aam instruction, as demonstrated by "aam 0x0," which triggers a divide-by-zero error.
CVSS Details
- CVSS 3.1 Base Score: 6.2
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | May 2, 2007 |
| Freebsd | — | Upgrade qemuUpgrade qemu-devel | Dec 10, 2025 | May 1, 2007 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade xen-tools-domUUpgrade xen-kmp-paeUpgrade xen-doc-htmlUpgrade xen-toolsUpgrade xen-libs-32bitUpgrade xenUpgrade xen-libsUpgrade xen-develUpgrade xen-doc-pdf | Aug 9, 2024 | Jun 28, 2013 |
| Ubuntu | — | Upgrade qemuUpgrade qemu-kvmUpgrade kvm | Nov 19, 2024 | May 2, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub