Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Jul 30, 2024 | Jan 23, 2020 |
| Freebsd | — | Upgrade qemuUpgrade qemu-user-staticUpgrade qemu-develUpgrade qemu-sbruno | Dec 10, 2025 | Jan 1, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Feb 4, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Jun 17, 2020 | Jan 23, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Jan 23, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 23, 2020 |
| Suse | — | Upgrade qemu-block-curlUpgrade qemu-chardev-baumUpgrade qemu-s390xUpgrade qemu-audio-alsaUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-gtkUpgrade qemu-ipxeUpgrade qemu-audio-paUpgrade qemu-audio-spiceUpgrade qemu-block-iscsiUpgrade qemu-ksmUpgrade qemu-ui-spice-coreUpgrade qemu-chardev-spiceUpgrade qemu-ui-openglUpgrade qemu-langUpgrade qemu-hw-usb-redirectUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-block-sshUpgrade qemu-ppcUpgrade qemu-ui-spice-appUpgrade qemu-toolsUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-armUpgrade qemu-skibootUpgrade qemu-kvmUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-s390Upgrade qemuUpgrade qemu-ui-cursesUpgrade kvmUpgrade qemu-x86Upgrade qemu-microvmUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade qemu-hw-display-qxl | Jun 13, 2016 | Aug 27, 2015 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system | Nov 8, 2024 | Jan 23, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub