QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing 'ioport' r/w operations. A privileged (CAP_SYS_RAWIO) user/process could use this flaw to leak or corrupt QEMU memory bytes.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Feb 9, 2016 | Feb 8, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 29, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 30, 2015 |
| Suse | — | Upgrade qemu-ppcUpgrade qemu-toolsUpgrade qemu-x86Upgrade qemu-s390xUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade xen-libs-32bitUpgrade qemu-vgabiosUpgrade qemu-microvmUpgrade xen-tools-domUUpgrade qemu-sgabiosUpgrade xen-libsUpgrade qemu-hw-display-qxlUpgrade qemu-kvmUpgrade xen-develUpgrade qemuUpgrade xen-kmp-traceUpgrade qemu-chardev-baumUpgrade qemu-hw-display-virtio-gpuUpgrade kvmUpgrade xenUpgrade xen-doc-htmlUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-kmp-paeUpgrade qemu-audio-alsaUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-coreUpgrade qemu-audio-spiceUpgrade qemu-chardev-spiceUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-vgaUpgrade xen-toolsUpgrade qemu-audio-ossUpgrade xen-kmp-defaultUpgrade qemu-ksmUpgrade qemu-ui-cursesUpgrade qemu-seabiosUpgrade qemu-ui-spice-appUpgrade qemu-s390Upgrade qemu-armUpgrade qemu-block-sshUpgrade xen-tools-xendomains-wait-diskUpgrade xen-doc-pdfUpgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-langUpgrade qemu-audio-paUpgrade qemu-ui-openglUpgrade qemu-ipxeUpgrade qemu-ui-gtk | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-ppc | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub