The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Jun 1, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Dec 4, 2019 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Jun 1, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2016 |
| Suse | — | Upgrade qemu-s390Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-seabiosUpgrade xen-tools-domuUpgrade qemu-langUpgrade qemu-ui-spice-coreUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-curlUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemu-toolsUpgrade xenUpgrade qemu-block-rbdUpgrade qemu-chardev-baumUpgrade qemu-guest-agentUpgrade qemu-audio-alsaUpgrade qemu-ksmUpgrade qemu-microvmUpgrade qemu-ui-gtkUpgrade xen-kmp-paeUpgrade qemu-hw-usb-redirectUpgrade qemu-block-sshUpgrade qemu-vgabiosUpgrade qemu-audio-paUpgrade qemu-ppcUpgrade qemu-kvmUpgrade qemu-x86Upgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-armUpgrade xen-libsUpgrade xen-develUpgrade qemu-sgabiosUpgrade qemu-ipxeUpgrade xen-kmp-defaultUpgrade qemu-ui-cursesUpgrade qemu-audio-spiceUpgrade qemu-chardev-spiceUpgrade xen-libs-32bitUpgrade xen-toolsUpgrade qemu-s390xUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-gpuUpgrade xen-doc-htmlUpgrade qemu-ui-openglUpgrade qemu-ui-spice-appUpgrade kvmUpgrade qemuUpgrade xen-doc-pdf | Aug 26, 2016 | Jun 1, 2016 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-s390x | Aug 6, 2016 | Jun 1, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub