The rocker_io_writel function in hw/net/rocker/rocker.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging failure to limit DMA buffer size.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Nov 4, 2016 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Nov 4, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Nov 4, 2016 |
| Suse | — | Upgrade qemu-s390Upgrade qemu-toolsUpgrade qemu-ppcUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu-audio-alsaUpgrade qemu-sgabiosUpgrade qemu-guest-agentUpgrade qemu-chardev-spiceUpgrade qemu-kvmUpgrade qemu-chardev-baumUpgrade qemu-microvmUpgrade qemu-ipxeUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390xUpgrade qemu-block-curlUpgrade qemu-block-sshUpgrade qemu-ui-gtkUpgrade qemu-langUpgrade qemu-block-rbdUpgrade qemu-audio-spiceUpgrade qemu-ui-spice-appUpgrade qemu-ui-cursesUpgrade qemu-armUpgrade qemu-ui-spice-coreUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-qxlUpgrade qemu-skibootUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-ksmUpgrade qemu-seabiosUpgrade qemu-ui-openglUpgrade qemu-hw-usb-redirectUpgrade qemu-block-iscsiUpgrade qemu-hw-display-virtio-vga | Nov 23, 2016 | Nov 4, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system | Nov 9, 2016 | Nov 4, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub