The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Jun 1, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Dec 4, 2019 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Jun 1, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2016 |
| Suse | — | Upgrade qemu-sgabiosUpgrade qemu-hw-display-qxlUpgrade kvmUpgrade xenUpgrade qemu-audio-paUpgrade xen-kmp-defaultUpgrade qemuUpgrade qemu-toolsUpgrade xen-doc-htmlUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu-chardev-baumUpgrade xen-tools-domUUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-microvmUpgrade xen-develUpgrade qemu-kvmUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-rbdUpgrade qemu-hw-usb-redirectUpgrade qemu-block-sshUpgrade qemu-seabiosUpgrade qemu-armUpgrade qemu-audio-spiceUpgrade qemu-block-iscsiUpgrade xen-kmp-paeUpgrade xen-libsUpgrade qemu-s390xUpgrade qemu-block-curlUpgrade qemu-skibootUpgrade qemu-audio-alsaUpgrade qemu-audio-ossUpgrade qemu-ui-spice-coreUpgrade qemu-chardev-spiceUpgrade qemu-ppcUpgrade qemu-s390Upgrade qemu-guest-agentUpgrade qemu-ui-openglUpgrade qemu-ui-gtkUpgrade qemu-langUpgrade xen-toolsUpgrade qemu-ksmUpgrade qemu-hw-display-virtio-vgaUpgrade xen-libs-32bitUpgrade qemu-ui-spice-appUpgrade xen-doc-pdfUpgrade qemu-ipxe | Aug 26, 2016 | Jun 1, 2016 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-mips | Aug 6, 2016 | Jun 1, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub