The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via a large I/O descriptor buffer length value.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 10, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Suse | — | Upgrade qemu-audio-paUpgrade qemu-ui-gtkUpgrade qemu-vgabiosUpgrade qemu-ui-spice-coreUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-seabiosUpgrade qemu-kvmUpgrade qemu-audio-alsaUpgrade qemu-guest-agentUpgrade qemu-block-iscsiUpgrade qemu-ksmUpgrade qemu-block-curlUpgrade qemu-ui-cursesUpgrade qemu-chardev-baumUpgrade qemu-x86Upgrade qemu-ppcUpgrade qemu-microvmUpgrade qemu-s390Upgrade qemu-sgabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-chardev-spiceUpgrade qemu-toolsUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-spiceUpgrade qemu-hw-display-qxlUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-sshUpgrade qemu-ui-spice-appUpgrade qemu-armUpgrade qemu-skibootUpgrade qemu-s390xUpgrade qemu-langUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-opengl | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-armUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-system-ppc | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub