The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-guest-agentUpgrade libcacard-toolsUpgrade libcacardUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade libcacard-develUpgrade qemu-imgUpgrade qemu-kvm-tools | Aug 17, 2018 | Jul 25, 2014 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Feb 11, 2020 |
| Oracle_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvmUpgrade libcacard-toolsUpgrade libcacardUpgrade libcacard-develUpgrade qemu-kvm-commonUpgrade qemu-guest-agent | Oct 16, 2024 | Feb 11, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 11, 2020 |
| Suse | — | Upgrade kvm | Jun 26, 2014 | Jun 26, 2014 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-system-misc | Nov 8, 2024 | Feb 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub