The vmsvga_fifo_read_raw function in hw/display/vmware_vga.c in QEMU allows local guest OS administrators to obtain sensitive host memory information or cause a denial of service (QEMU process crash) by changing FIFO registers and issuing a VGA command, which triggers an out-of-bounds read.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Jun 1, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Dec 4, 2019 | Jun 1, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Jun 1, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2016 |
| Suse | — | Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-vgabiosUpgrade qemu-audio-paUpgrade qemu-seabiosUpgrade qemu-chardev-baumUpgrade qemu-ksmUpgrade qemu-audio-alsaUpgrade qemu-audio-ossUpgrade qemu-hw-usb-redirectUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-guest-agentUpgrade qemu-ppcUpgrade qemu-toolsUpgrade qemu-kvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-gtkUpgrade xenUpgrade qemu-langUpgrade xen-tools-domUUpgrade qemu-block-sshUpgrade qemu-s390Upgrade qemu-microvmUpgrade qemu-block-iscsiUpgrade xen-kmp-paeUpgrade qemu-ui-spice-coreUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade xen-doc-pdfUpgrade qemu-audio-spiceUpgrade qemu-x86Upgrade kvmUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-armUpgrade qemu-ui-openglUpgrade xen-kmp-defaultUpgrade xen-libs-32bitUpgrade qemu-ui-cursesUpgrade xen-toolsUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-chardev-spiceUpgrade xen-libsUpgrade qemu-ipxeUpgrade xen-develUpgrade qemu-sgabiosUpgrade qemu-skibootUpgrade xen-doc-htmlUpgrade qemu-ui-spice-app | Aug 26, 2016 | Jun 1, 2016 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-ppc | Aug 6, 2016 | Jun 1, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub