The rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via a large interval timer reload value.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Nov 4, 2016 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade xen-doc-pdfUpgrade qemu-block-sshUpgrade qemu-ui-spice-coreUpgrade qemu-ppcUpgrade qemu-sgabiosUpgrade qemu-ui-spice-appUpgrade qemuUpgrade qemu-block-curlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-toolsUpgrade xen-libsUpgrade qemu-s390Upgrade qemu-ui-gtkUpgrade xen-toolsUpgrade qemu-s390xUpgrade qemu-kvmUpgrade qemu-langUpgrade xenUpgrade xen-libs-32bitUpgrade qemu-block-rbdUpgrade qemu-vgabiosUpgrade qemu-chardev-baumUpgrade qemu-ipxeUpgrade qemu-chardev-spiceUpgrade kvmUpgrade qemu-audio-spiceUpgrade qemu-guest-agentUpgrade qemu-x86Upgrade qemu-audio-ossUpgrade xen-tools-xendomains-wait-diskUpgrade xen-kmp-traceUpgrade qemu-hw-display-qxlUpgrade xen-tools-domUUpgrade xen-doc-htmlUpgrade qemu-seabiosUpgrade qemu-skibootUpgrade qemu-armUpgrade xen-develUpgrade qemu-block-iscsiUpgrade qemu-ksmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-paUpgrade qemu-audio-alsaUpgrade qemu-ui-cursesUpgrade qemu-ui-openglUpgrade xen-kmp-paeUpgrade qemu-microvmUpgrade qemu-hw-display-virtio-gpu | Nov 23, 2016 | Nov 4, 2016 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-misc | Apr 21, 2017 | Nov 4, 2016 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub