The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to cursor.mask[] and cursor.image[] array sizes when processing a DEFINE_CURSOR svga command.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Oct 11, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 8, 2016 |
| Suse | — | Upgrade qemu-seabiosUpgrade qemu-s390Upgrade qemu-microvmUpgrade qemu-ipxeUpgrade qemu-audio-spiceUpgrade qemu-ui-cursesUpgrade qemu-vgabiosUpgrade qemu-audio-alsaUpgrade qemu-hw-usb-redirectUpgrade qemu-block-curlUpgrade qemu-kvmUpgrade qemu-s390xUpgrade qemu-ui-gtkUpgrade qemu-ksmUpgrade qemu-ui-spice-coreUpgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade qemu-ppcUpgrade qemu-skibootUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-paUpgrade qemu-toolsUpgrade qemu-x86Upgrade qemu-chardev-spiceUpgrade qemu-guest-agentUpgrade qemuUpgrade qemu-sgabiosUpgrade kvmUpgrade qemu-hw-display-qxlUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-spice-appUpgrade qemu-langUpgrade qemu-audio-ossUpgrade qemu-armUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-openglUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-vga | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-kvm | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub