The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving a value of divider greater than baud base.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Oct 25, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Nov 4, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Nov 4, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | Nov 4, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 12, 2016 |
| Suse | — | Upgrade qemu-hw-display-virtio-gpuUpgrade xen-libs-32bitUpgrade qemu-vgabiosUpgrade xen-tools-domUUpgrade qemu-skibootUpgrade xen-libsUpgrade xen-tools-xendomains-wait-diskUpgrade qemuUpgrade qemu-microvmUpgrade qemu-x86Upgrade qemu-s390Upgrade qemu-kvmUpgrade qemu-ui-cursesUpgrade qemu-armUpgrade xenUpgrade xen-kmp-defaultUpgrade xen-kmp-traceUpgrade qemu-seabiosUpgrade xen-doc-htmlUpgrade xen-doc-pdfUpgrade kvmUpgrade qemu-sgabiosUpgrade qemu-chardev-baumUpgrade qemu-audio-ossUpgrade qemu-guest-agentUpgrade xen-develUpgrade qemu-audio-alsaUpgrade qemu-ui-spice-coreUpgrade qemu-ui-gtkUpgrade qemu-block-rbdUpgrade xen-kmp-paeUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-paUpgrade qemu-block-sshUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-langUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-iscsiUpgrade qemu-ksmUpgrade xen-toolsUpgrade qemu-hw-usb-redirectUpgrade qemu-ipxeUpgrade qemu-ui-openglUpgrade qemu-block-curlUpgrade qemu-s390xUpgrade qemu-chardev-spiceUpgrade qemu-audio-spiceUpgrade qemu-hw-display-qxlUpgrade qemu-ppcUpgrade qemu-ui-spice-app | Nov 23, 2016 | Nov 4, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-sparc | Apr 21, 2017 | Nov 4, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub