QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It occurs when a guest sends a Layer-2 packet smaller than 22 bytes. A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 9, 2016 | Feb 8, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 29, 2016 |
| Suse | — | Upgrade qemu-skibootUpgrade qemu-chardev-spiceUpgrade qemu-ipxeUpgrade qemu-audio-spiceUpgrade qemu-hw-display-qxlUpgrade qemu-langUpgrade xen-doc-htmlUpgrade qemu-block-rbdUpgrade qemu-s390xUpgrade qemu-ui-openglUpgrade qemu-armUpgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-sshUpgrade xen-libsUpgrade qemu-ui-spice-appUpgrade qemuUpgrade xen-libs-32bitUpgrade xen-toolsUpgrade xen-develUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-toolsUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-s390Upgrade qemu-vgabiosUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade qemu-x86Upgrade qemu-block-iscsiUpgrade qemu-ppcUpgrade qemu-seabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-kvmUpgrade qemu-microvmUpgrade qemu-audio-paUpgrade qemu-block-curlUpgrade qemu-hw-usb-redirectUpgrade qemu-chardev-baumUpgrade qemu-ksmUpgrade xenUpgrade xen-kmp-paeUpgrade qemu-ui-cursesUpgrade qemu-sgabiosUpgrade xen-tools-domUUpgrade qemu-ui-spice-coreUpgrade qemu-guest-agent | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-ppc | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub