The vmsvga_fifo_run function in hw/display/vmware_vga.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to cursor.mask[] and cursor.image[] array sizes when processing a DEFINE_CURSOR svga command.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Oct 11, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 8, 2016 |
| Suse | — | Upgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-s390Upgrade qemu-audio-alsaUpgrade qemu-hw-usb-redirectUpgrade qemu-ksmUpgrade qemu-ui-spice-coreUpgrade qemu-ui-cursesUpgrade qemu-audio-spiceUpgrade qemu-seabiosUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade qemu-microvmUpgrade qemu-ipxeUpgrade qemu-s390xUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-chardev-spiceUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ppcUpgrade qemuUpgrade qemu-sgabiosUpgrade qemu-x86Upgrade qemu-toolsUpgrade qemu-ui-spice-appUpgrade qemu-guest-agentUpgrade qemu-hw-display-qxlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-sshUpgrade qemu-skibootUpgrade qemu-ui-openglUpgrade qemu-audio-paUpgrade kvmUpgrade qemu-audio-ossUpgrade qemu-arm | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-mips | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub