Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 30, 2017 | May 18, 2016 |
| Centos_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-kvm-debuginfoUpgrade qemu-guest-agent | Aug 28, 2019 | May 11, 2016 |
| Debian | — | Upgrade qemu-kvmUpgrade qemuUpgrade xen | May 10, 2016 | May 9, 2016 |
| Freebsd | — | Upgrade xen-tools | Dec 10, 2025 | Jul 4, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Nov 30, 2017 | May 11, 2016 |
| Oracle_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-imgUpgrade qemu-kvm-tools | Aug 9, 2016 | May 11, 2016 |
| Redhat_linux | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-debuginfoNo solution existsUpgrade qemu-kvm-toolsUpgrade qemu-guest-agent | Nov 4, 2016 | May 11, 2016 |
| Suse | — | Upgrade qemu-audio-ossUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-armUpgrade qemu-toolsUpgrade kvmUpgrade qemu-chardev-spiceUpgrade xen-libs-32bitUpgrade qemu-hw-display-virtio-vgaUpgrade xen-doc-pdfUpgrade xen-libsUpgrade qemu-ipxeUpgrade xen-doc-htmlUpgrade qemu-ui-openglUpgrade xen-tools-domUUpgrade qemuUpgrade qemu-hw-display-qxlUpgrade qemu-x86Upgrade xen-kmp-defaultUpgrade qemu-ui-cursesUpgrade qemu-audio-spiceUpgrade qemu-block-rbdUpgrade qemu-audio-paUpgrade qemu-ksmUpgrade qemu-s390Upgrade xen-kmp-paeUpgrade qemu-microvmUpgrade qemu-chardev-baumUpgrade qemu-block-curlUpgrade qemu-ui-spice-coreUpgrade qemu-ui-spice-appUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-langUpgrade qemu-skibootUpgrade qemu-ui-gtkUpgrade qemu-audio-alsaUpgrade qemu-ppcUpgrade xenUpgrade xen-toolsUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-seabiosUpgrade qemu-kvmUpgrade qemu-s390xUpgrade qemu-hw-usb-redirectUpgrade qemu-block-iscsiUpgrade qemu-block-sshUpgrade qemu-vgabios | Jun 13, 2016 | May 11, 2016 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system | May 12, 2016 | May 11, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub