The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Jun 1, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Apr 16, 2020 | Jun 1, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2016 |
| Suse | — | Upgrade qemuUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-sgabiosUpgrade qemu-ui-cursesUpgrade xen-doc-htmlUpgrade xen-kmp-defaultUpgrade qemu-armUpgrade qemu-x86Upgrade qemu-hw-display-virtio-vgaUpgrade kvmUpgrade qemu-ui-openglUpgrade qemu-hw-display-qxlUpgrade qemu-audio-spiceUpgrade xen-libsUpgrade xen-toolsUpgrade qemu-ipxeUpgrade qemu-ui-spice-appUpgrade qemu-chardev-spiceUpgrade qemu-skibootUpgrade xen-develUpgrade xen-libs-32bitUpgrade xen-doc-pdfUpgrade qemu-block-sshUpgrade qemu-ui-gtkUpgrade qemu-toolsUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-kvmUpgrade qemu-hw-usb-redirectUpgrade qemu-block-rbdUpgrade qemu-ppcUpgrade xen-kmp-paeUpgrade qemu-audio-paUpgrade qemu-ui-spice-coreUpgrade qemu-ksmUpgrade qemu-s390Upgrade qemu-audio-alsaUpgrade qemu-chardev-baumUpgrade qemu-vgabiosUpgrade qemu-audio-ossUpgrade qemu-seabiosUpgrade qemu-guest-agentUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-curlUpgrade xen-tools-domuUpgrade xenUpgrade qemu-block-iscsiUpgrade qemu-microvm | Aug 26, 2016 | Jun 1, 2016 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-s390x | Aug 6, 2016 | Jun 1, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub