The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for block_size and logical_sector_size variables. These are used to derive other fields like 'sectors_per_block' etc. A user able to alter the Qemu disk image could ise this flaw to crash the Qemu instance resulting in DoS.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvm | Aug 17, 2018 | Apr 22, 2014 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Sep 29, 2022 |
| Oracle_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-img | Oct 16, 2024 | Feb 11, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub