The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-guest-agentUpgrade libcacardUpgrade libcacard-toolsUpgrade libcacard-develUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-tools | Aug 17, 2018 | Jul 25, 2014 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Feb 11, 2020 |
| Oracle_linux | — | Upgrade qemu-guest-agentUpgrade libcacard-toolsUpgrade libcacard-develUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade libcacardUpgrade qemu-kvm-toolsUpgrade qemu-img | Oct 16, 2024 | Feb 11, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 11, 2020 |
| Suse | — | Upgrade kvm | Jun 26, 2014 | Jun 26, 2014 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-kvmUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-ppc | Nov 8, 2024 | Feb 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub