The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to cursor.mask[] and cursor.image[] array sizes when processing a DEFINE_CURSOR svga command.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Oct 11, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 8, 2016 |
| Suse | — | Upgrade qemu-skibootUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ppcUpgrade qemu-x86Upgrade qemu-armUpgrade qemu-audio-ossUpgrade qemu-ui-openglUpgrade kvmUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-qxlUpgrade qemu-sgabiosUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-paUpgrade qemu-chardev-spiceUpgrade qemu-langUpgrade qemu-ui-spice-appUpgrade qemuUpgrade qemu-toolsUpgrade qemu-block-sshUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-alsaUpgrade qemu-ui-spice-coreUpgrade qemu-ui-cursesUpgrade qemu-ui-gtkUpgrade qemu-seabiosUpgrade qemu-block-iscsiUpgrade qemu-audio-spiceUpgrade qemu-s390Upgrade qemu-hw-usb-redirectUpgrade qemu-ksmUpgrade qemu-vgabiosUpgrade qemu-kvmUpgrade qemu-block-curlUpgrade qemu-ipxeUpgrade qemu-chardev-baumUpgrade qemu-microvmUpgrade qemu-s390x | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-arm | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub