The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to cursor.mask[] and cursor.image[] array sizes when processing a DEFINE_CURSOR svga command.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Oct 11, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 8, 2016 |
| Suse | — | Upgrade qemu-audio-ossUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-sgabiosUpgrade kvmUpgrade qemu-audio-paUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-armUpgrade qemu-x86Upgrade qemu-ppcUpgrade qemu-ui-spice-appUpgrade qemu-chardev-spiceUpgrade qemu-ui-openglUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-toolsUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-skibootUpgrade qemu-ui-cursesUpgrade qemu-block-curlUpgrade qemu-s390xUpgrade qemu-ui-spice-coreUpgrade qemu-microvmUpgrade qemu-hw-usb-redirectUpgrade qemu-ksmUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade qemu-audio-alsaUpgrade qemu-seabiosUpgrade qemu-ui-gtkUpgrade qemu-s390Upgrade qemu-audio-spiceUpgrade qemu-vgabiosUpgrade qemu-ipxe | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-x86 | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub