The host_from_stream_offset function in arch_init.c in QEMU, when loading RAM during migration, allows remote attackers to execute arbitrary code via a crafted (1) offset or (2) length value in savevm data.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 12, 2014 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 12, 2014 |
| Oracle_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade libcacardUpgrade libcacard-develUpgrade qemu-kvm-toolsUpgrade libcacard-toolsUpgrade qemu-img | Oct 16, 2024 | Dec 12, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 12, 2014 |
| Suse | — | Upgrade qemu-guest-agentUpgrade qemu-chardev-baumUpgrade libvirt-develUpgrade qemu-block-sshUpgrade qemu-ksmUpgrade qemu-ui-spice-appUpgrade qemu-s390Upgrade qemu-hw-usb-redirectUpgrade qemu-seabiosUpgrade qemu-ui-spice-coreUpgrade qemu-ui-cursesUpgrade qemu-block-curlUpgrade libvirt-devel-32bitUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade qemu-vgabiosUpgrade qemu-skibootUpgrade qemu-langUpgrade qemu-audio-alsaUpgrade qemu-microvmUpgrade libvirt-clientUpgrade libvirt-client-32bitUpgrade qemu-ui-gtkUpgrade qemu-audio-paUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade kvmUpgrade qemu-hw-display-qxlUpgrade qemu-audio-ossUpgrade libvirtUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-spiceUpgrade qemu-sgabiosUpgrade qemu-chardev-spiceUpgrade qemu-block-rbdUpgrade qemu-x86Upgrade qemu-ppcUpgrade qemu-s390xUpgrade libvirt-pythonUpgrade qemu-ipxeUpgrade libvirt-lock-sanlockUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-openglUpgrade libvirt-docUpgrade qemu-armUpgrade qemu-toolsUpgrade qemu | Dec 18, 2015 | Dec 12, 2014 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-kvmUpgrade qemu-system-arm | Nov 8, 2024 | Dec 12, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub