The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a VGA command.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Jun 1, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Dec 4, 2019 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Apr 16, 2020 | Jun 1, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2016 |
| Suse | — | Upgrade qemu-sgabiosUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-microvmUpgrade xen-tools-domUUpgrade qemu-kvmUpgrade xen-develUpgrade xen-kmp-defaultUpgrade qemuUpgrade qemu-hw-display-qxlUpgrade qemu-chardev-baumUpgrade qemu-toolsUpgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-x86Upgrade xen-doc-htmlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-paUpgrade kvmUpgrade xenUpgrade qemu-ipxeUpgrade qemu-armUpgrade xen-kmp-paeUpgrade qemu-hw-usb-redirectUpgrade qemu-block-sshUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-s390xUpgrade qemu-seabiosUpgrade qemu-ui-gtkUpgrade qemu-audio-ossUpgrade qemu-skibootUpgrade qemu-chardev-spiceUpgrade qemu-ui-spice-coreUpgrade qemu-audio-alsaUpgrade qemu-ksmUpgrade xen-toolsUpgrade qemu-ui-spice-appUpgrade qemu-langUpgrade xen-libs-32bitUpgrade qemu-ppcUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-vgaUpgrade xen-doc-pdfUpgrade qemu-block-iscsiUpgrade qemu-s390Upgrade xen-libsUpgrade qemu-ui-openglUpgrade qemu-audio-spice | Aug 26, 2016 | Jun 1, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system | Aug 6, 2016 | Jun 1, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub