Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Jul 30, 2024 | Jan 23, 2020 |
| Freebsd | — | Upgrade qemu-sbrunoUpgrade qemu-develUpgrade qemuUpgrade qemu-user-static | Dec 10, 2025 | Jan 1, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Feb 4, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Jun 17, 2020 | Jan 23, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Jan 23, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 23, 2020 |
| Suse | — | Upgrade qemu-audio-alsaUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-spice-coreUpgrade qemu-armUpgrade qemu-audio-spiceUpgrade qemu-ui-spice-appUpgrade qemu-hw-usb-redirectUpgrade qemu-block-curlUpgrade qemu-chardev-spiceUpgrade qemu-block-iscsiUpgrade qemu-ppcUpgrade qemu-guest-agentUpgrade qemu-audio-paUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-chardev-baumUpgrade qemu-s390xUpgrade qemu-skibootUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-langUpgrade qemu-seabiosUpgrade qemu-ipxeUpgrade qemu-ksmUpgrade qemu-toolsUpgrade qemu-ui-gtkUpgrade qemu-microvmUpgrade qemu-s390Upgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-sgabiosUpgrade qemu-kvmUpgrade qemu-x86Upgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-vgabiosUpgrade qemuUpgrade kvmUpgrade qemu-ui-curses | Jun 13, 2016 | Aug 27, 2015 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-kvm | Nov 8, 2024 | Jan 23, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub