Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kvm-qemu-imgUpgrade kmod-kvmUpgrade kmod-kvm-debugUpgrade xenUpgrade qemu-kvmUpgrade qemu-imgUpgrade xen-libsUpgrade qemu-kvm-toolsUpgrade xen-develUpgrade kvmUpgrade qemu-guest-agentUpgrade kvm-tools | Dec 1, 2016 | Nov 23, 2012 |
| Debian | — | Upgrade xenUpgrade qemu | Jul 30, 2024 | Nov 23, 2012 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Jan 6, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen.Upgrade app-emulation/pvgrub.Upgrade app-emulation/xen-tools. | Oct 30, 2017 | Nov 23, 2012 |
| Oracle_linux | — | Upgrade xen-libsUpgrade qemu-kvm-toolsUpgrade kmod-kvmUpgrade xen-develUpgrade kvm-qemu-imgUpgrade qemu-guest-agentUpgrade xenUpgrade qemu-imgUpgrade qemu-kvmUpgrade kvm-toolsUpgrade kvmUpgrade kmod-kvm-debug | Oct 16, 2024 | Nov 23, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 5, 2012 |
| Suse | — | Upgrade xen-doc-pdfUpgrade qemu-block-iscsiUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-pr-helperUpgrade xen-libsUpgrade qemu-audio-ossUpgrade xen-kmp-paeUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ksmUpgrade qemu-block-sshUpgrade qemu-seabiosUpgrade xen-kmp-traceUpgrade qemuUpgrade qemu-linux-userUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-skibootUpgrade qemu-langUpgrade xen-develUpgrade qemu-armUpgrade qemu-block-dmgUpgrade xen-toolsUpgrade qemu-ivshmem-toolsUpgrade qemu-toolsUpgrade qemu-vhost-user-gpuUpgrade qemu-sgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xenUpgrade qemu-x86Upgrade qemu-headlessUpgrade qemu-block-nfsUpgrade qemu-s390xUpgrade qemu-hw-usb-hostUpgrade vm-installUpgrade xen-libs-32bitUpgrade qemu-guest-agentUpgrade qemu-SLOFUpgrade qemu-docUpgrade qemu-audio-alsaUpgrade kvmUpgrade qemu-vgabiosUpgrade qemu-audio-jackUpgrade qemu-vmsr-helperUpgrade qemu-block-rbdUpgrade xen-tools-domUUpgrade qemu-s390Upgrade qemu-ppcUpgrade qemu-hw-usb-smartcardUpgrade qemu-kvmUpgrade qemu-block-curlUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-dbusUpgrade qemu-imgUpgrade xen-doc-htmlUpgrade qemu-microvmUpgrade xen-kmp-defaultUpgrade qemu-extra | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade qemu-kvm | Nov 8, 2024 | Nov 23, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub