The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Dec 5, 2017 | Aug 2, 2017 |
| Oracle_linux | — | Upgrade qemuUpgrade qemu-commonUpgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemu-block-glusterUpgrade ivshmem-toolsUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-kvm-coreUpgrade qemu-system-x86-coreUpgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemu-system-aarch64-core | May 15, 2019 | Jul 13, 2017 |
| Suse | — | Upgrade qemu-block-iscsiUpgrade qemu-audio-ossUpgrade qemu-ksmUpgrade qemu-chardev-spiceUpgrade qemu-ui-cursesUpgrade qemu-skibootUpgrade xen-kmp-paeUpgrade qemu-ui-openglUpgrade qemu-block-curlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-alsaUpgrade qemu-seabiosUpgrade qemu-s390Upgrade qemu-block-sshUpgrade xen-kmp-defaultUpgrade qemu-ui-gtkUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-coreUpgrade xen-toolsUpgrade xen-libsUpgrade qemu-ipxeUpgrade xen-doc-pdfUpgrade qemu-langUpgrade qemu-armUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-spiceUpgrade xen-doc-htmlUpgrade qemu-microvmUpgrade xenUpgrade qemu-guest-agentUpgrade qemu-audio-paUpgrade qemu-sgabiosUpgrade kvmUpgrade xen-libs-32bitUpgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ppcUpgrade qemu-s390xUpgrade xen-tools-domUUpgrade qemu-kvmUpgrade qemu-toolsUpgrade qemu-block-rbdUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemuUpgrade qemu-x86Upgrade qemu-chardev-baumUpgrade xen-develUpgrade qemu-hw-display-qxl | Sep 1, 2017 | Aug 2, 2017 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-aarch64 | Feb 21, 2018 | Aug 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub