The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via a large I/O descriptor buffer length value.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 10, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Suse | — | Upgrade qemu-ui-gtkUpgrade qemu-chardev-baumUpgrade qemu-ui-cursesUpgrade qemu-audio-paUpgrade qemu-ppcUpgrade qemu-microvmUpgrade qemu-audio-alsaUpgrade qemu-kvmUpgrade qemu-s390Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-vgabiosUpgrade qemu-block-iscsiUpgrade qemu-sgabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-ksmUpgrade qemu-ui-spice-coreUpgrade qemu-x86Upgrade qemu-guest-agentUpgrade qemu-seabiosUpgrade qemu-block-curlUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-spiceUpgrade qemu-block-sshUpgrade qemu-ui-spice-appUpgrade qemu-ipxeUpgrade qemu-chardev-spiceUpgrade qemu-toolsUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-armUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-openglUpgrade qemu-langUpgrade qemu-skibootUpgrade qemu-s390xUpgrade qemu-block-rbd | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-ppc | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub