The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving blit pitch values.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Dec 26, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 18, 2016 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade qemu-x86Upgrade xen-libs-32bitUpgrade qemu-ksmUpgrade qemu-ipxeUpgrade qemu-skibootUpgrade xenUpgrade qemu-ui-cursesUpgrade xen-kmp-paeUpgrade xen-tools-domUUpgrade qemu-s390Upgrade qemu-sgabiosUpgrade qemu-seabiosUpgrade qemu-block-curlUpgrade xen-doc-pdfUpgrade qemu-audio-alsaUpgrade xen-doc-htmlUpgrade qemu-chardev-baumUpgrade qemu-kvmUpgrade qemu-audio-spiceUpgrade xen-libsUpgrade qemu-vgabiosUpgrade qemu-chardev-spiceUpgrade qemuUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-block-sshUpgrade qemu-microvmUpgrade xen-toolsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ppcUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-openglUpgrade qemu-audio-paUpgrade qemu-ui-spice-coreUpgrade qemu-toolsUpgrade qemu-guest-agentUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemu-armUpgrade xen-develUpgrade kvmUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-qxlUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-s390xUpgrade qemu-ui-gtkUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-rbd | Jan 14, 2017 | Jan 13, 2017 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-sparc | Apr 21, 2017 | Jan 13, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub