An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to corrupt QEMU process memory on the (destination) host, which could potentially result in arbitrary code execution on the host with the privileges of the QEMU process.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade libcacard-toolsUpgrade libcacardUpgrade libcacard-develUpgrade qemu-kvm-common | Aug 17, 2018 | Jul 25, 2014 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | May 28, 2021 |
| Oracle_linux | — | Upgrade libcacard-develUpgrade qemu-kvm-toolsUpgrade libcacardUpgrade libcacard-toolsUpgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-guest-agent | Oct 16, 2024 | May 28, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 28, 2021 |
| Suse | — | Upgrade kvm | Jun 26, 2014 | Jun 26, 2014 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-x86 | Nov 8, 2024 | May 28, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub