The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 30, 2017 | Aug 2, 2016 |
| Centos_linux | — | Upgrade qemu-kvm-commonUpgrade kmod-kvm-debugUpgrade libcacard-develUpgrade qemu-imgUpgrade kvm-toolsUpgrade kmod-kvmUpgrade qemu-kvm-toolsUpgrade libcacard-toolsUpgrade kvm-qemu-imgUpgrade kvmUpgrade qemu-kvmUpgrade libcacardUpgrade qemu-guest-agent | Oct 21, 2016 | Aug 2, 2016 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Jul 30, 2016 |
| Freebsd | — | Upgrade xen-tools | Dec 10, 2025 | Aug 2, 2016 |
| Oracle_linux | — | Upgrade libcacard-develUpgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade kvm-qemu-imgUpgrade qemu-kvm-commonUpgrade kvmUpgrade kmod-kvm-debugUpgrade qemu-kvmUpgrade libcacard-toolsUpgrade kmod-kvmUpgrade libcacardUpgrade kvm-tools | Aug 9, 2016 | Jul 27, 2016 |
| Redhat_linux | — | Upgrade qemu-kvm-toolsNo solution existsUpgrade qemu-guest-agentUpgrade kvmUpgrade kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-imgUpgrade libcacard-develUpgrade qemu-kvmUpgrade libcacard-toolsUpgrade kmod-kvmUpgrade kvm-debuginfoUpgrade kvm-qemu-imgUpgrade qemu-kvm-debuginfoUpgrade kmod-kvm-debugUpgrade libcacard | Aug 9, 2016 | Aug 2, 2016 |
| Suse | — | Upgrade qemu-hw-usb-redirectUpgrade qemu-chardev-baumUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade qemu-microvmUpgrade xen-doc-htmlUpgrade kvmUpgrade qemu-block-curlUpgrade xenUpgrade qemu-kvmUpgrade qemu-ui-gtkUpgrade qemu-audio-alsaUpgrade qemu-s390Upgrade qemu-audio-paUpgrade qemu-sgabiosUpgrade xen-kmp-defaultUpgrade xen-toolsUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-gpuUpgrade xen-develUpgrade qemu-audio-ossUpgrade xen-kmp-paeUpgrade qemu-chardev-spiceUpgrade qemu-skibootUpgrade qemu-ui-openglUpgrade qemu-s390xUpgrade qemu-block-iscsiUpgrade xen-libs-32bitUpgrade qemu-armUpgrade xen-tools-domuUpgrade qemu-seabiosUpgrade qemu-hw-display-qxlUpgrade xen-libsUpgrade xen-doc-pdfUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ppcUpgrade qemu-ui-spice-appUpgrade qemu-langUpgrade qemu-ui-spice-coreUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-sshUpgrade qemu-ksmUpgrade qemu-audio-spiceUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-ipxe | Aug 26, 2016 | Aug 2, 2016 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system | Aug 6, 2016 | Aug 2, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub