Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Oct 5, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Oct 5, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Apr 16, 2020 | Oct 5, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Nov 19, 2019 | Oct 5, 2016 |
| Suse | — | Upgrade qemu-ui-gtkUpgrade qemu-ksmUpgrade qemu-audio-spiceUpgrade qemu-block-curlUpgrade qemu-ui-openglUpgrade qemu-ipxeUpgrade qemu-s390Upgrade qemu-chardev-spiceUpgrade qemu-audio-paUpgrade qemu-ui-spice-coreUpgrade qemu-block-sshUpgrade qemu-s390xUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-appUpgrade qemu-guest-agentUpgrade qemu-ppcUpgrade qemu-seabiosUpgrade qemu-block-rbdUpgrade qemu-audio-alsaUpgrade qemu-skibootUpgrade qemu-hw-usb-redirectUpgrade qemu-langUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemu-toolsUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemuUpgrade qemu-x86Upgrade qemu-hw-display-virtio-vgaUpgrade qemu-armUpgrade qemu-hw-display-qxlUpgrade qemu-microvmUpgrade qemu-ui-cursesUpgrade qemu-vgabiosUpgrade kvmUpgrade qemu-kvmUpgrade qemu-hw-s390x-virtio-gpu-ccw | Nov 23, 2016 | Oct 5, 2016 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-aarch64 | Nov 9, 2016 | Oct 5, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub