QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It could occur while reading Interrupt Mask Registers (IMR). A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 9, 2016 | Feb 8, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 29, 2016 |
| Suse | — | Upgrade qemu-s390xUpgrade qemu-ui-spice-coreUpgrade xen-doc-pdfUpgrade qemu-block-curlUpgrade xen-libs-32bitUpgrade qemu-chardev-spiceUpgrade xen-kmp-defaultUpgrade qemu-block-iscsiUpgrade qemu-langUpgrade qemu-toolsUpgrade qemu-guest-agentUpgrade qemu-ui-spice-appUpgrade qemu-vgabiosUpgrade qemu-block-sshUpgrade qemu-audio-alsaUpgrade qemu-audio-spiceUpgrade qemu-ipxeUpgrade qemu-block-rbdUpgrade qemu-s390Upgrade xen-toolsUpgrade xen-libsUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-chardev-baumUpgrade qemu-kvmUpgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade qemu-microvmUpgrade qemu-ppcUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-ksmUpgrade qemu-ui-gtkUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-kmp-paeUpgrade qemu-ui-openglUpgrade qemu-armUpgrade xen-tools-domUUpgrade qemu-sgabiosUpgrade xen-develUpgrade xen-kmp-traceUpgrade qemu-hw-display-virtio-gpuUpgrade qemuUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-qxlUpgrade qemu-seabiosUpgrade xen-doc-htmlUpgrade qemu-ui-cursesUpgrade qemu-x86Upgrade xen | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub