Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 30, 2017 | May 18, 2016 |
| Centos_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm | Aug 28, 2019 | May 11, 2016 |
| Debian | — | Upgrade xenUpgrade qemu-kvmUpgrade qemu | May 10, 2016 | May 9, 2016 |
| Freebsd | — | Upgrade xen-tools | Dec 10, 2025 | Jul 4, 2016 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Nov 30, 2017 | May 11, 2016 |
| Oracle_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-guest-agentUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Aug 9, 2016 | May 11, 2016 |
| Redhat_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-guest-agentNo solution existsUpgrade qemu-kvm-debuginfoUpgrade qemu-imgUpgrade qemu-kvm | Nov 4, 2016 | May 11, 2016 |
| Suse | — | Upgrade qemu-audio-spiceUpgrade xen-doc-htmlUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-vgaUpgrade xen-libsUpgrade qemu-hw-display-qxlUpgrade xen-libs-32bitUpgrade xen-tools-domUUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-cursesUpgrade qemu-armUpgrade qemuUpgrade qemu-x86Upgrade qemu-sgabiosUpgrade kvmUpgrade qemu-ipxeUpgrade xen-doc-pdfUpgrade qemu-ui-openglUpgrade qemu-audio-ossUpgrade xen-kmp-defaultUpgrade qemu-toolsUpgrade qemu-block-rbdUpgrade xenUpgrade qemu-skibootUpgrade qemu-ui-spice-appUpgrade xen-kmp-paeUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-ui-spice-coreUpgrade qemu-microvmUpgrade qemu-vgabiosUpgrade qemu-s390Upgrade qemu-ksmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-guest-agentUpgrade xen-toolsUpgrade qemu-hw-usb-redirectUpgrade qemu-s390xUpgrade qemu-kvmUpgrade qemu-block-sshUpgrade qemu-audio-paUpgrade qemu-langUpgrade qemu-seabiosUpgrade qemu-chardev-baumUpgrade qemu-ppcUpgrade qemu-hw-s390x-virtio-gpu-ccw | Jun 13, 2016 | May 11, 2016 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-kvmUpgrade qemu-system-x86 | May 12, 2016 | May 11, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub