The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Dec 5, 2017 | Aug 2, 2017 |
| Oracle_linux | — | Upgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade qemu-block-glusterUpgrade qemu-commonUpgrade qemuUpgrade ivshmem-toolsUpgrade qemu-system-x86Upgrade qemu-imgUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86-coreUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64Upgrade qemu-kvm | May 15, 2019 | Jul 13, 2017 |
| Suse | — | Upgrade qemu-skibootUpgrade qemu-ui-cursesUpgrade qemu-ksmUpgrade qemu-block-sshUpgrade qemu-audio-ossUpgrade xen-kmp-defaultUpgrade qemu-audio-alsaUpgrade qemu-armUpgrade qemu-ui-spice-appUpgrade qemu-ui-spice-coreUpgrade xen-libsUpgrade xen-toolsUpgrade qemu-hw-usb-redirectUpgrade qemu-s390Upgrade qemu-ipxeUpgrade xen-doc-pdfUpgrade xen-kmp-paeUpgrade qemu-ui-gtkUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-langUpgrade qemu-ui-openglUpgrade qemu-chardev-spiceUpgrade qemu-block-curlUpgrade qemu-block-iscsiUpgrade qemu-kvmUpgrade kvmUpgrade qemu-guest-agentUpgrade qemu-s390xUpgrade qemu-audio-paUpgrade qemu-vgabiosUpgrade qemu-hw-display-qxlUpgrade qemu-chardev-baumUpgrade xen-tools-domUUpgrade xen-develUpgrade qemu-x86Upgrade qemu-ppcUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-libs-32bitUpgrade qemu-audio-spiceUpgrade xen-doc-htmlUpgrade qemu-block-rbdUpgrade qemu-toolsUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemuUpgrade xenUpgrade qemu-microvm | Sep 1, 2017 | Aug 2, 2017 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-x86 | Feb 21, 2018 | Aug 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub