QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It could occur while reading Interrupt Mask Registers (IMR). A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 9, 2016 | Feb 8, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 29, 2016 |
| Suse | — | Upgrade qemu-ui-gtkUpgrade qemu-ksmUpgrade qemu-seabiosUpgrade qemu-sgabiosUpgrade qemu-armUpgrade xen-develUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-x86Upgrade qemu-audio-ossUpgrade qemu-hw-display-qxlUpgrade qemu-audio-paUpgrade xen-doc-htmlUpgrade xenUpgrade qemuUpgrade xen-tools-xendomains-wait-diskUpgrade xen-tools-domUUpgrade qemu-skibootUpgrade xen-kmp-paeUpgrade qemu-ppcUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-microvmUpgrade xen-kmp-traceUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-cursesUpgrade qemu-hw-usb-redirectUpgrade qemu-block-rbdUpgrade qemu-ui-spice-coreUpgrade xen-libsUpgrade xen-toolsUpgrade qemu-toolsUpgrade qemu-chardev-baumUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-langUpgrade qemu-chardev-spiceUpgrade qemu-vgabiosUpgrade qemu-s390Upgrade qemu-block-iscsiUpgrade xen-libs-32bitUpgrade qemu-block-curlUpgrade qemu-ui-spice-appUpgrade qemu-audio-spiceUpgrade qemu-s390xUpgrade qemu-kvmUpgrade xen-doc-pdfUpgrade qemu-guest-agentUpgrade qemu-ipxeUpgrade xen-kmp-defaultUpgrade qemu-block-sshUpgrade qemu-audio-alsa | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system-arm | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub