The vmware-vga driver (hw/display/vmware_vga.c) in QEMU allows local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling.
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Jul 30, 2024 | Nov 14, 2014 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Nov 14, 2014 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-img | Nov 3, 2020 | Nov 14, 2014 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Sep 28, 2020 | Nov 14, 2014 |
| Suse | — | Upgrade xen-doc-htmlUpgrade xen-kmp-paeUpgrade qemu-ppcUpgrade qemu-seabiosUpgrade xen-tools-domUUpgrade xen-develUpgrade qemu-toolsUpgrade xen-kmp-traceUpgrade qemuUpgrade qemu-kvmUpgrade xen-kmp-defaultUpgrade qemu-vgabiosUpgrade xen-libsUpgrade xen-libs-32bitUpgrade kvmUpgrade qemu-sgabiosUpgrade qemu-block-rbdUpgrade qemu-langUpgrade xen-doc-pdfUpgrade xen-toolsUpgrade qemu-x86Upgrade xenUpgrade qemu-s390Upgrade qemu-ipxeUpgrade qemu-block-curlUpgrade qemu-guest-agent | Mar 28, 2016 | Nov 14, 2014 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-kvmUpgrade qemu-system-arm | Nov 8, 2024 | Nov 14, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub