The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a zero length for the descriptor buffer.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 10, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Suse | — | Upgrade qemu-s390Upgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-audio-spiceUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-coreUpgrade qemu-ksmUpgrade qemu-s390xUpgrade qemu-block-rbdUpgrade qemu-kvmUpgrade qemu-hw-usb-redirectUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-microvmUpgrade qemu-audio-alsaUpgrade qemu-guest-agentUpgrade qemu-ui-gtkUpgrade qemu-sgabiosUpgrade qemu-skibootUpgrade qemu-ui-cursesUpgrade qemu-ppcUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-qxlUpgrade qemu-ui-openglUpgrade qemu-langUpgrade qemu-ipxeUpgrade qemu-toolsUpgrade qemu-seabiosUpgrade qemu-audio-paUpgrade kvmUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-ui-spice-appUpgrade qemu-armUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-vga | Nov 3, 2016 | Oct 21, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub