Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Oct 5, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Oct 5, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Apr 16, 2020 | Oct 5, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Nov 19, 2019 | Oct 5, 2016 |
| Suse | — | Upgrade qemu-chardev-baumUpgrade qemu-audio-paUpgrade qemu-skibootUpgrade qemu-block-curlUpgrade qemu-ipxeUpgrade qemu-s390Upgrade qemu-ui-gtkUpgrade qemu-audio-alsaUpgrade qemu-block-rbdUpgrade qemu-seabiosUpgrade qemu-block-sshUpgrade qemu-s390xUpgrade qemu-ui-openglUpgrade qemu-audio-spiceUpgrade qemu-audio-ossUpgrade qemu-guest-agentUpgrade qemu-langUpgrade qemu-ui-spice-coreUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-appUpgrade qemu-ppcUpgrade qemu-hw-usb-redirectUpgrade qemu-chardev-spiceUpgrade qemu-ksmUpgrade qemu-microvmUpgrade qemu-sgabiosUpgrade kvmUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade qemu-kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-armUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-x86Upgrade qemu-ui-cursesUpgrade qemu-vgabios | Nov 23, 2016 | Oct 5, 2016 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-sparc | Nov 9, 2016 | Oct 5, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub