QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 29, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 29, 2016 |
| Suse | — | Upgrade qemu-block-iscsiUpgrade qemu-guest-agentUpgrade qemu-block-curlUpgrade qemu-vgabiosUpgrade qemu-audio-alsaUpgrade qemu-block-sshUpgrade qemu-s390Upgrade qemu-ksmUpgrade xenUpgrade qemu-hw-usb-redirectUpgrade xen-kmp-paeUpgrade qemu-kvmUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-toolsUpgrade qemu-block-rbdUpgrade qemu-ppcUpgrade qemu-ui-spice-coreUpgrade qemu-langUpgrade qemu-chardev-baumUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-microvmUpgrade qemu-seabiosUpgrade qemu-ui-gtkUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-skibootUpgrade xen-tools-domUUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-armUpgrade qemu-audio-spiceUpgrade xen-develUpgrade xen-kmp-defaultUpgrade qemu-sgabiosUpgrade xen-doc-htmlUpgrade qemu-toolsUpgrade qemu-ui-spice-appUpgrade qemu-s390xUpgrade qemu-ipxeUpgrade qemu-ui-cursesUpgrade qemu-chardev-spiceUpgrade xen-libsUpgrade qemu-ui-openglUpgrade xen-doc-pdfUpgrade qemu-x86Upgrade kvmUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-hw-display-qxlUpgrade xen-libs-32bit | Jan 3, 2017 | Dec 29, 2016 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-aarch64 | Apr 21, 2017 | Dec 29, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub