The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a zero length for the descriptor buffer.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 10, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Suse | — | Upgrade qemu-ui-spice-appUpgrade qemuUpgrade qemu-armUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-langUpgrade qemu-ipxeUpgrade kvmUpgrade qemu-skibootUpgrade qemu-chardev-spiceUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ppcUpgrade qemu-toolsUpgrade qemu-audio-paUpgrade qemu-seabiosUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-openglUpgrade qemu-hw-display-qxlUpgrade qemu-ksmUpgrade qemu-microvmUpgrade qemu-hw-usb-redirectUpgrade qemu-sgabiosUpgrade qemu-ui-spice-coreUpgrade qemu-kvmUpgrade qemu-audio-alsaUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade qemu-s390Upgrade qemu-audio-spiceUpgrade qemu-vgabiosUpgrade qemu-ui-gtkUpgrade qemu-x86Upgrade qemu-s390x | Nov 3, 2016 | Oct 21, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub