Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Jul 30, 2024 | Jan 23, 2020 |
| Freebsd | — | Upgrade qemu-user-staticUpgrade qemuUpgrade qemu-sbrunoUpgrade qemu-devel | Dec 10, 2025 | Jan 1, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Feb 4, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Jun 17, 2020 | Jan 23, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Jan 23, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 23, 2020 |
| Suse | — | Upgrade qemu-ui-cursesUpgrade qemu-audio-ossUpgrade qemu-hw-display-qxlUpgrade qemu-vgabiosUpgrade qemuUpgrade qemu-s390Upgrade qemu-kvmUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-x86Upgrade qemu-microvmUpgrade kvmUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-sgabiosUpgrade qemu-ui-openglUpgrade qemu-armUpgrade qemu-ui-gtkUpgrade qemu-skibootUpgrade qemu-s390xUpgrade qemu-ui-spice-coreUpgrade qemu-chardev-baumUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ipxeUpgrade qemu-ksmUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-alsaUpgrade qemu-ppcUpgrade qemu-ui-spice-appUpgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-chardev-spiceUpgrade qemu-toolsUpgrade qemu-block-sshUpgrade qemu-langUpgrade qemu-seabiosUpgrade qemu-audio-paUpgrade qemu-guest-agentUpgrade qemu-audio-spice | Jun 13, 2016 | Aug 27, 2015 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-mips | Nov 8, 2024 | Jan 23, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub