Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Oct 5, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Oct 5, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Apr 16, 2020 | Oct 5, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Nov 19, 2019 | Oct 5, 2016 |
| Suse | — | Upgrade qemu-langUpgrade qemu-block-sshUpgrade qemu-audio-ossUpgrade qemu-block-rbdUpgrade qemu-ui-gtkUpgrade qemu-seabiosUpgrade qemu-s390xUpgrade qemu-ui-spice-coreUpgrade qemu-block-curlUpgrade qemu-hw-usb-redirectUpgrade qemu-block-iscsiUpgrade qemu-audio-paUpgrade qemu-skibootUpgrade qemu-ui-spice-appUpgrade qemu-s390Upgrade qemu-chardev-spiceUpgrade qemu-chardev-baumUpgrade qemu-guest-agentUpgrade qemu-ppcUpgrade qemu-ipxeUpgrade qemu-audio-spiceUpgrade qemu-audio-alsaUpgrade qemu-ui-openglUpgrade qemu-ksmUpgrade qemu-ui-cursesUpgrade qemu-armUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-toolsUpgrade qemu-kvmUpgrade qemu-hw-display-qxlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemuUpgrade qemu-x86Upgrade kvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-microvmUpgrade qemu-sgabiosUpgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-vga | Nov 23, 2016 | Oct 5, 2016 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-misc | Nov 9, 2016 | Oct 5, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub