The rocker_io_writel function in hw/net/rocker/rocker.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging failure to limit DMA buffer size.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Nov 4, 2016 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Nov 4, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Nov 4, 2016 |
| Suse | — | Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-gtkUpgrade qemu-audio-alsaUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-guest-agentUpgrade qemu-x86Upgrade qemu-ppcUpgrade qemu-chardev-spiceUpgrade qemu-toolsUpgrade qemu-vgabiosUpgrade qemu-microvmUpgrade qemu-kvmUpgrade qemu-langUpgrade qemu-chardev-baumUpgrade qemu-sgabiosUpgrade qemu-s390xUpgrade qemu-s390Upgrade qemu-audio-spiceUpgrade qemu-block-sshUpgrade qemu-ipxeUpgrade qemu-ui-cursesUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-spice-appUpgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade qemu-skibootUpgrade qemu-ui-spice-coreUpgrade qemu-ui-openglUpgrade qemu-hw-display-qxlUpgrade qemu-block-iscsiUpgrade qemu-hw-usb-redirectUpgrade qemu-armUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemuUpgrade qemu-ksm | Nov 23, 2016 | Nov 4, 2016 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-system-arm | Nov 9, 2016 | Nov 4, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub