The vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host memory information by leveraging failure to initialize the txcq_descr object.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 9, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Dec 4, 2019 | Dec 10, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Dec 10, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 11, 2016 |
| Suse | — | Upgrade xen-libs-32bitUpgrade xenUpgrade qemu-s390xUpgrade qemu-hw-usb-redirectUpgrade xen-kmp-defaultUpgrade xen-toolsUpgrade qemu-ui-spice-coreUpgrade qemu-block-iscsiUpgrade qemu-microvmUpgrade qemu-ui-cursesUpgrade qemu-ksmUpgrade qemu-chardev-baumUpgrade qemu-skibootUpgrade qemu-vgabiosUpgrade qemu-audio-spiceUpgrade qemu-s390Upgrade xen-kmp-paeUpgrade qemu-langUpgrade qemu-audio-alsaUpgrade qemu-block-curlUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-appUpgrade qemu-kvmUpgrade qemu-seabiosUpgrade qemu-block-sshUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-sgabiosUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-vgaUpgrade xen-develUpgrade qemu-audio-ossUpgrade qemu-armUpgrade qemu-x86Upgrade qemu-chardev-spiceUpgrade qemu-ui-openglUpgrade qemu-guest-agentUpgrade qemu-hw-display-qxlUpgrade xen-tools-domUUpgrade qemu-ppcUpgrade xen-doc-htmlUpgrade xen-libsUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-gpu-pci | Nov 3, 2016 | Oct 7, 2016 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-sparc | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub