The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via a large I/O descriptor buffer length value.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 10, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Suse | — | Upgrade qemu-hw-usb-redirectUpgrade qemu-audio-paUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ppcUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade qemu-x86Upgrade qemu-block-curlUpgrade qemu-microvmUpgrade qemu-seabiosUpgrade qemu-ksmUpgrade qemu-sgabiosUpgrade qemu-s390Upgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade qemu-ui-cursesUpgrade qemu-guest-agentUpgrade qemu-ui-spice-coreUpgrade qemuUpgrade qemu-armUpgrade qemu-langUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-s390xUpgrade qemu-ui-spice-appUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-openglUpgrade qemu-chardev-spiceUpgrade qemu-toolsUpgrade qemu-block-sshUpgrade qemu-ipxeUpgrade qemu-audio-spiceUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-oss | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-ppc | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub