The vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host memory information by leveraging failure to initialize the txcq_descr object.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 9, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Dec 4, 2019 | Dec 10, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Apr 16, 2020 | Dec 10, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 11, 2016 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade qemu-s390xUpgrade qemu-skibootUpgrade qemu-s390Upgrade xenUpgrade qemu-kvmUpgrade qemu-block-curlUpgrade xen-toolsUpgrade qemu-audio-spiceUpgrade qemu-vgabiosUpgrade qemu-seabiosUpgrade qemu-block-sshUpgrade qemu-ui-spice-coreUpgrade xen-kmp-paeUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade qemu-chardev-baumUpgrade qemu-langUpgrade qemu-block-iscsiUpgrade xen-libs-32bitUpgrade qemu-hw-usb-redirectUpgrade qemu-microvmUpgrade qemu-ui-cursesUpgrade qemu-ui-spice-appUpgrade qemu-ksmUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-develUpgrade qemu-toolsUpgrade qemu-guest-agentUpgrade qemu-hw-display-qxlUpgrade xen-tools-domUUpgrade qemu-sgabiosUpgrade xen-libsUpgrade qemu-ipxeUpgrade xen-doc-htmlUpgrade qemu-ppcUpgrade qemu-audio-ossUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-paUpgrade qemu-armUpgrade qemu-ui-opengl | Nov 3, 2016 | Oct 7, 2016 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system-aarch64 | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub