The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 30, 2017 | Aug 2, 2016 |
| Centos_linux | — | Upgrade libcacardUpgrade qemu-guest-agentUpgrade kvmUpgrade qemu-kvmUpgrade kmod-kvm-debugUpgrade kvm-qemu-imgUpgrade qemu-imgUpgrade libcacard-develUpgrade kvm-toolsUpgrade kmod-kvmUpgrade qemu-kvm-commonUpgrade libcacard-toolsUpgrade qemu-kvm-tools | Oct 21, 2016 | Aug 2, 2016 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Jul 30, 2016 |
| Freebsd | — | Upgrade xen-tools | Dec 10, 2025 | Aug 2, 2016 |
| Oracle_linux | — | Upgrade kvm-qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade kmod-kvm-debugUpgrade kvmUpgrade kmod-kvmUpgrade libcacard-toolsUpgrade libcacardUpgrade kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-guest-agentUpgrade libcacard-devel | Aug 9, 2016 | Jul 27, 2016 |
| Redhat_linux | — | Upgrade qemu-guest-agentNo solution existsUpgrade kvm-toolsUpgrade kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade libcacard-toolsUpgrade kvm-debuginfoUpgrade qemu-kvm-debuginfoUpgrade libcacardUpgrade qemu-imgUpgrade kmod-kvmUpgrade libcacard-develUpgrade qemu-kvmUpgrade kmod-kvm-debugUpgrade kvm-qemu-img | Aug 9, 2016 | Aug 2, 2016 |
| Suse | — | Upgrade qemu-toolsUpgrade qemu-block-curlUpgrade qemu-x86Upgrade xen-kmp-defaultUpgrade qemu-ui-cursesUpgrade qemu-microvmUpgrade qemu-chardev-baumUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-alsaUpgrade qemu-vgabiosUpgrade qemu-ui-gtkUpgrade xenUpgrade qemu-kvmUpgrade kvmUpgrade qemu-s390Upgrade qemu-audio-paUpgrade xen-doc-htmlUpgrade qemu-sgabiosUpgrade xen-tools-domUUpgrade qemu-guest-agentUpgrade qemu-ksmUpgrade qemu-audio-spiceUpgrade qemu-seabiosUpgrade qemuUpgrade qemu-audio-ossUpgrade qemu-hw-display-qxlUpgrade qemu-ui-spice-appUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-toolsUpgrade qemu-langUpgrade xen-develUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-chardev-spiceUpgrade qemu-ppcUpgrade xen-libsUpgrade xen-doc-pdfUpgrade qemu-block-iscsiUpgrade qemu-ui-openglUpgrade qemu-s390xUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade xen-libs-32bitUpgrade xen-kmp-paeUpgrade qemu-skibootUpgrade qemu-armUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-spice-core | Aug 26, 2016 | Aug 2, 2016 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system | Aug 6, 2016 | Aug 2, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub