QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 29, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 29, 2016 |
| Suse | — | Upgrade qemu-toolsUpgrade qemu-ui-cursesUpgrade qemu-ipxeUpgrade xen-tools-domUUpgrade qemu-hw-display-virtio-gpuUpgrade xen-libsUpgrade xen-develUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-audio-spiceUpgrade xen-doc-htmlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-skibootUpgrade xen-kmp-defaultUpgrade qemu-s390xUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-qxlUpgrade qemu-armUpgrade xen-libs-32bitUpgrade qemu-ui-spice-appUpgrade qemu-x86Upgrade xen-doc-pdfUpgrade qemu-sgabiosUpgrade qemu-ui-openglUpgrade kvmUpgrade qemu-microvmUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade qemu-block-sshUpgrade qemu-ui-spice-coreUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-chardev-baumUpgrade qemu-vgabiosUpgrade qemu-seabiosUpgrade qemu-ksmUpgrade qemu-block-curlUpgrade qemu-kvmUpgrade qemu-s390Upgrade xenUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-langUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-hw-usb-redirectUpgrade xen-kmp-paeUpgrade qemu-audio-paUpgrade qemu-ppcUpgrade xen-toolsUpgrade qemu-block-iscsi | Jan 3, 2017 | Dec 29, 2016 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-mips | Apr 21, 2017 | Dec 29, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub