The vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host memory information by leveraging failure to initialize the txcq_descr object.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 9, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Dec 4, 2019 | Dec 10, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Apr 16, 2020 | Dec 10, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 11, 2016 |
| Suse | — | Upgrade qemu-seabiosUpgrade qemu-audio-alsaUpgrade qemu-audio-spiceUpgrade xen-kmp-paeUpgrade qemu-s390xUpgrade qemu-microvmUpgrade qemu-ui-spice-coreUpgrade qemu-skibootUpgrade xen-kmp-defaultUpgrade qemu-chardev-baumUpgrade xen-libs-32bitUpgrade qemu-vgabiosUpgrade qemu-ui-gtkUpgrade qemu-ksmUpgrade xen-toolsUpgrade qemu-s390Upgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-kvmUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-appUpgrade qemu-ui-cursesUpgrade qemu-langUpgrade qemu-block-sshUpgrade xenUpgrade qemu-audio-paUpgrade qemu-ppcUpgrade xen-develUpgrade qemu-sgabiosUpgrade xen-libsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-chardev-spiceUpgrade qemu-guest-agentUpgrade qemu-toolsUpgrade qemu-hw-display-qxlUpgrade xen-tools-domUUpgrade qemu-ipxeUpgrade qemu-audio-ossUpgrade qemu-block-rbdUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemuUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-x86Upgrade qemu-armUpgrade qemu-ui-openglUpgrade xen-doc-htmlUpgrade qemu-hw-display-virtio-vga | Nov 3, 2016 | Oct 7, 2016 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-kvmUpgrade qemu-system-sparcUpgrade qemu-system-aarch64 | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub