Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Jul 30, 2024 | Jan 23, 2020 |
| Freebsd | — | Upgrade qemu-develUpgrade qemu-sbrunoUpgrade qemuUpgrade qemu-user-static | Dec 10, 2025 | Jan 1, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Feb 4, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Jun 17, 2020 | Jan 23, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Jan 23, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 23, 2020 |
| Suse | — | Upgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-s390xUpgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-ipxeUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ksmUpgrade qemu-audio-alsaUpgrade qemu-block-sshUpgrade qemu-hw-usb-redirectUpgrade qemu-langUpgrade qemu-chardev-spiceUpgrade qemu-seabiosUpgrade qemu-audio-paUpgrade qemu-armUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-coreUpgrade qemu-toolsUpgrade qemu-skibootUpgrade qemu-chardev-baumUpgrade qemu-ui-openglUpgrade qemu-ppcUpgrade qemu-ui-spice-appUpgrade qemu-audio-spiceUpgrade qemu-hw-display-qxlUpgrade kvmUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-s390Upgrade qemu-audio-ossUpgrade qemu-ui-cursesUpgrade qemu-x86Upgrade qemu-microvmUpgrade qemu-sgabiosUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade qemu | Jun 13, 2016 | Aug 27, 2015 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-mips | Nov 8, 2024 | Jan 23, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub