hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds access or infinite loop, and QEMU process crash) via a crafted page count for descriptor rings.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 9, 2016 |
| Suse | — | Upgrade qemu-audio-alsaUpgrade qemu-ui-spice-appUpgrade qemu-ksmUpgrade qemu-s390Upgrade qemu-ui-spice-coreUpgrade qemu-audio-ossUpgrade qemu-skibootUpgrade qemu-seabiosUpgrade qemu-ui-openglUpgrade qemu-ui-gtkUpgrade qemu-chardev-baumUpgrade qemu-block-iscsiUpgrade qemu-ui-cursesUpgrade qemu-block-curlUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390xUpgrade qemu-toolsUpgrade qemu-chardev-spiceUpgrade qemu-audio-paUpgrade qemu-kvmUpgrade qemuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ipxeUpgrade qemu-ppcUpgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade qemu-audio-spiceUpgrade qemu-armUpgrade qemu-guest-agentUpgrade qemu-hw-display-qxlUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-rbdUpgrade qemu-microvmUpgrade qemu-langUpgrade qemu-x86 | Nov 3, 2016 | Oct 21, 2016 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-kvm | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub