hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds access or infinite loop, and QEMU process crash) via a crafted page count for descriptor rings.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 9, 2016 |
| Suse | — | Upgrade qemu-ui-gtkUpgrade qemu-seabiosUpgrade qemu-block-curlUpgrade qemu-ui-openglUpgrade qemu-chardev-baumUpgrade qemu-ui-cursesUpgrade qemu-s390Upgrade qemu-skibootUpgrade qemu-audio-ossUpgrade qemu-ui-spice-coreUpgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-ui-spice-appUpgrade qemu-ksmUpgrade qemu-vgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-kvmUpgrade qemu-ppcUpgrade qemu-toolsUpgrade qemu-chardev-spiceUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-armUpgrade qemu-guest-agentUpgrade qemu-microvmUpgrade qemu-block-sshUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ipxeUpgrade qemu-x86Upgrade qemu-s390xUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-sgabiosUpgrade qemu-hw-display-qxlUpgrade qemu-audio-spiceUpgrade qemu-hw-usb-redirectUpgrade qemu | Nov 3, 2016 | Oct 21, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-kvmUpgrade qemu-system-arm | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub