The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvmUpgrade libcacard-toolsUpgrade qemu-kvm-commonUpgrade qemu-guest-agentUpgrade libcacardUpgrade libcacard-devel | Aug 17, 2018 | Jul 25, 2014 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Feb 11, 2020 |
| Oracle_linux | — | Upgrade libcacard-develUpgrade libcacardUpgrade qemu-kvm-commonUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade libcacard-toolsUpgrade qemu-kvm-toolsUpgrade qemu-img | Oct 16, 2024 | Feb 11, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 11, 2020 |
| Suse | — | Upgrade kvm | Jun 26, 2014 | Jun 26, 2014 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system-ppcUpgrade qemu-system-arm | Nov 8, 2024 | Feb 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub