The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Jun 1, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 4, 2019 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Apr 16, 2020 | Jun 1, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2016 |
| Suse | — | Upgrade qemu-seabiosUpgrade qemu-chardev-baumUpgrade qemu-ksmUpgrade qemu-ui-spice-coreUpgrade qemu-block-sshUpgrade qemu-guest-agentUpgrade qemu-ui-gtkUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-rbdUpgrade qemu-hw-usb-redirectUpgrade xenUpgrade qemu-ppcUpgrade xen-kmp-paeUpgrade qemu-toolsUpgrade qemu-audio-ossUpgrade qemu-langUpgrade qemu-block-iscsiUpgrade qemu-vgabiosUpgrade qemu-audio-paUpgrade qemu-microvmUpgrade xen-tools-domUUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-s390Upgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-kvmUpgrade xen-libsUpgrade qemu-ui-openglUpgrade qemu-s390xUpgrade qemu-audio-spiceUpgrade qemu-x86Upgrade qemu-skibootUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-spice-appUpgrade qemu-armUpgrade kvmUpgrade qemu-hw-display-virtio-vgaUpgrade xen-doc-pdfUpgrade xen-toolsUpgrade qemu-ipxeUpgrade xen-develUpgrade qemu-sgabiosUpgrade qemu-chardev-spiceUpgrade xen-libs-32bitUpgrade xen-doc-htmlUpgrade xen-kmp-defaultUpgrade qemu-ui-curses | Aug 26, 2016 | Jun 1, 2016 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-system-arm | Aug 6, 2016 | Jun 1, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub