The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a zero length for the descriptor buffer.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 10, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Suse | — | Upgrade qemu-x86Upgrade qemu-kvmUpgrade qemu-s390xUpgrade qemu-audio-spiceUpgrade qemu-hw-usb-redirectUpgrade qemu-sgabiosUpgrade qemu-ksmUpgrade qemu-s390Upgrade qemu-chardev-baumUpgrade qemu-ui-spice-coreUpgrade qemu-microvmUpgrade qemu-audio-alsaUpgrade qemu-guest-agentUpgrade qemu-vgabiosUpgrade qemu-block-curlUpgrade qemu-ui-gtkUpgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-chardev-spiceUpgrade qemu-block-sshUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-openglUpgrade qemuUpgrade qemu-audio-ossUpgrade qemu-ui-spice-appUpgrade qemu-armUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ppcUpgrade kvmUpgrade qemu-audio-paUpgrade qemu-ui-cursesUpgrade qemu-langUpgrade qemu-ipxeUpgrade qemu-seabiosUpgrade qemu-tools | Nov 3, 2016 | Oct 21, 2016 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub