Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Oct 5, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Oct 5, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Apr 16, 2020 | Oct 5, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Nov 19, 2019 | Oct 5, 2016 |
| Suse | — | Upgrade qemu-guest-agentUpgrade qemu-block-sshUpgrade qemu-ksmUpgrade qemu-block-curlUpgrade qemu-ppcUpgrade qemu-ui-spice-coreUpgrade qemu-chardev-baumUpgrade qemu-skibootUpgrade qemu-chardev-spiceUpgrade qemu-ui-spice-appUpgrade qemu-langUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-gtkUpgrade qemu-ipxeUpgrade qemu-s390Upgrade qemu-ui-openglUpgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-block-rbdUpgrade qemu-seabiosUpgrade qemu-audio-spiceUpgrade qemu-s390xUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-armUpgrade qemu-hw-display-qxlUpgrade qemu-ui-cursesUpgrade qemu-kvmUpgrade kvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-sgabiosUpgrade qemuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade qemu-toolsUpgrade qemu-microvm | Nov 23, 2016 | Oct 5, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-ppc | Nov 9, 2016 | Oct 5, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub