The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via a large I/O descriptor buffer length value.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 10, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Suse | — | Upgrade qemu-audio-paUpgrade qemu-hw-usb-redirectUpgrade qemu-guest-agentUpgrade qemu-sgabiosUpgrade qemu-chardev-baumUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ppcUpgrade qemu-kvmUpgrade qemu-block-curlUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-coreUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade qemu-seabiosUpgrade qemu-ksmUpgrade qemu-ui-cursesUpgrade qemu-microvmUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade qemu-s390Upgrade qemu-hw-display-virtio-gpu-pciUpgrade qemuUpgrade qemu-toolsUpgrade qemu-audio-ossUpgrade qemu-armUpgrade qemu-skibootUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-ui-spice-appUpgrade qemu-audio-spiceUpgrade qemu-chardev-spiceUpgrade qemu-langUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ipxeUpgrade qemu-ui-openglUpgrade qemu-hw-display-qxl | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-kvmUpgrade qemu-system-arm | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub