Buffer overflow in hw/ide/ahci.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via vectors related to migrating ports.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Nov 4, 2014 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Nov 19, 2019 | Nov 4, 2014 |
| Suse | — | Upgrade kvm | Jun 26, 2014 | Jun 26, 2014 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-kvmUpgrade qemu-system-mipsUpgrade qemu-system-misc | Nov 8, 2024 | Nov 4, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub