The virgl_cmd_get_capset function in hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service (out-of-bounds read and process crash) via a VIRTIO_GPU_CMD_GET_CAPSET command with a maximum capabilities size with a value of 0.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Feb 27, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Feb 27, 2017 |
| Suse | — | Upgrade qemu-hw-display-virtio-gpuUpgrade qemu-x86Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-microvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-vgabiosUpgrade qemu-toolsUpgrade qemu-kvmUpgrade qemu-ppcUpgrade qemu-sgabiosUpgrade qemu-s390xUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-audio-alsaUpgrade qemu-guest-agentUpgrade qemu-seabiosUpgrade qemu-block-iscsiUpgrade qemu-langUpgrade qemu-ui-spice-coreUpgrade qemu-audio-ossUpgrade qemu-ui-openglUpgrade qemu-audio-paUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-appUpgrade qemu-ui-gtkUpgrade qemu-armUpgrade qemu-block-curlUpgrade qemu-chardev-spiceUpgrade qemu-audio-spiceUpgrade qemu-ipxeUpgrade qemu-ui-cursesUpgrade qemu-ksmUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-s390Upgrade qemu-chardev-baum | Mar 8, 2017 | Feb 27, 2017 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-s390x | Apr 21, 2017 | Feb 27, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub