The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 30, 2017 | Aug 2, 2016 |
| Centos_linux | — | Upgrade qemu-kvmUpgrade libcacardUpgrade kvmUpgrade qemu-guest-agentUpgrade kvm-qemu-imgUpgrade kvm-toolsUpgrade kmod-kvm-debugUpgrade kmod-kvmUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade libcacard-develUpgrade qemu-kvm-toolsUpgrade libcacard-tools | Oct 21, 2016 | Aug 2, 2016 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Jul 30, 2016 |
| Freebsd | — | Upgrade xen-tools | Dec 10, 2025 | Aug 2, 2016 |
| Oracle_linux | — | Upgrade kmod-kvmUpgrade kvm-qemu-imgUpgrade qemu-kvmUpgrade libcacard-toolsUpgrade kmod-kvm-debugUpgrade kvmUpgrade qemu-kvm-commonUpgrade kvm-toolsUpgrade libcacardUpgrade qemu-guest-agentUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade libcacard-devel | Aug 9, 2016 | Jul 27, 2016 |
| Redhat_linux | — | Upgrade qemu-imgUpgrade libcacardUpgrade libcacard-toolsUpgrade qemu-kvm-debuginfoUpgrade kvm-qemu-imgUpgrade libcacard-develUpgrade kmod-kvm-debugUpgrade kmod-kvmUpgrade kvm-debuginfoUpgrade qemu-kvmUpgrade kvm-toolsUpgrade qemu-guest-agentUpgrade qemu-kvm-commonNo solution existsUpgrade qemu-kvm-toolsUpgrade kvm | Aug 9, 2016 | Aug 2, 2016 |
| Suse | — | Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-gtkUpgrade qemu-ui-cursesUpgrade qemu-chardev-baumUpgrade xen-doc-htmlUpgrade qemu-hw-usb-redirectUpgrade qemu-microvmUpgrade qemu-vgabiosUpgrade qemu-audio-paUpgrade qemu-x86Upgrade qemu-kvmUpgrade qemu-block-curlUpgrade qemu-s390Upgrade xen-kmp-defaultUpgrade qemu-toolsUpgrade xenUpgrade qemu-audio-alsaUpgrade kvmUpgrade qemu-sgabiosUpgrade qemu-audio-ossUpgrade qemu-armUpgrade qemu-block-iscsiUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-langUpgrade qemu-hw-display-virtio-vgaUpgrade xen-tools-domuUpgrade xen-libsUpgrade qemu-ppcUpgrade qemu-seabiosUpgrade qemu-block-sshUpgrade xen-doc-pdfUpgrade xen-develUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-ui-openglUpgrade qemu-audio-spiceUpgrade qemu-ui-spice-appUpgrade qemu-ksmUpgrade qemu-chardev-spiceUpgrade xen-kmp-paeUpgrade qemu-skibootUpgrade xen-toolsUpgrade xen-libs-32bitUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-s390xUpgrade qemu-ui-spice-coreUpgrade qemu-ipxeUpgrade qemu-hw-display-qxl | Aug 26, 2016 | Aug 2, 2016 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-mips | Aug 6, 2016 | Aug 2, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub