The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Jun 1, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Apr 16, 2020 | Jun 1, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2016 |
| Suse | — | Upgrade qemu-block-sshUpgrade qemu-ui-openglUpgrade qemu-hw-usb-redirectUpgrade qemu-seabiosUpgrade qemu-langUpgrade qemu-block-curlUpgrade qemu-chardev-spiceUpgrade xen-doc-pdfUpgrade qemu-ui-spice-appUpgrade xen-toolsUpgrade qemu-ipxeUpgrade qemu-ksmUpgrade qemu-ppcUpgrade qemu-s390xUpgrade xen-libs-32bitUpgrade qemu-skibootUpgrade qemu-s390Upgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-iscsiUpgrade qemu-ui-gtkUpgrade qemu-audio-alsaUpgrade xen-libsUpgrade xen-kmp-paeUpgrade qemu-armUpgrade qemu-audio-ossUpgrade qemu-block-rbdUpgrade qemu-ui-spice-coreUpgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-microvmUpgrade qemu-audio-paUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-cursesUpgrade xen-develUpgrade qemu-sgabiosUpgrade qemu-kvmUpgrade qemu-hw-display-qxlUpgrade xen-doc-htmlUpgrade xenUpgrade xen-tools-domUUpgrade qemu-vgabiosUpgrade qemu-toolsUpgrade qemu-x86Upgrade kvmUpgrade qemuUpgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-chardev-baum | Aug 26, 2016 | Jun 1, 2016 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-misc | Aug 6, 2016 | Jun 1, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub