The rocker_io_writel function in hw/net/rocker/rocker.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging failure to limit DMA buffer size.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Nov 4, 2016 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Nov 4, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Nov 4, 2016 |
| Suse | — | Upgrade qemu-microvmUpgrade qemu-sgabiosUpgrade qemu-guest-agentUpgrade qemu-block-curlUpgrade qemu-s390Upgrade qemu-s390xUpgrade qemu-block-rbdUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-chardev-spiceUpgrade qemu-audio-alsaUpgrade qemu-vgabiosUpgrade qemu-audio-spiceUpgrade qemu-langUpgrade qemu-x86Upgrade qemu-kvmUpgrade qemu-ui-gtkUpgrade qemu-toolsUpgrade qemu-block-sshUpgrade qemu-ipxeUpgrade qemu-ppcUpgrade qemu-chardev-baumUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-spice-coreUpgrade qemu-ui-spice-appUpgrade qemu-armUpgrade qemuUpgrade qemu-audio-ossUpgrade qemu-audio-paUpgrade qemu-skibootUpgrade qemu-ksmUpgrade qemu-hw-display-qxlUpgrade qemu-block-iscsiUpgrade qemu-seabiosUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-opengl | Nov 23, 2016 | Nov 4, 2016 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-kvm | Nov 9, 2016 | Nov 4, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub