The dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) via a crafted DHCP options string.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Dec 5, 2017 | Jul 25, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 4, 2019 | Jul 25, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Jul 25, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 17, 2017 |
| Suse | — | Upgrade qemuUpgrade qemu-armUpgrade xen-tools-domUUpgrade qemu-hw-display-qxlUpgrade xen-libsUpgrade kvmUpgrade xen-develUpgrade xen-doc-htmlUpgrade qemu-toolsUpgrade qemu-microvmUpgrade qemu-kvmUpgrade xen-doc-pdfUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-kmp-defaultUpgrade qemu-x86Upgrade xenUpgrade xen-libs-32bitUpgrade qemu-ui-cursesUpgrade qemu-sgabiosUpgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-skibootUpgrade qemu-s390xUpgrade qemu-chardev-spiceUpgrade qemu-langUpgrade qemu-hw-usb-redirectUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-seabiosUpgrade qemu-ui-spice-coreUpgrade qemu-ui-spice-appUpgrade qemu-chardev-baumUpgrade qemu-ipxeUpgrade qemu-block-sshUpgrade qemu-block-iscsiUpgrade qemu-audio-ossUpgrade qemu-ppcUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-rbdUpgrade qemu-audio-alsaUpgrade qemu-s390Upgrade qemu-audio-spiceUpgrade xen-kmp-paeUpgrade qemu-ksmUpgrade qemu-block-curlUpgrade qemu-audio-paUpgrade qemu-ui-openglUpgrade qemu-ui-gtkUpgrade xen-tools | Sep 1, 2017 | Jul 25, 2017 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-aarch64 | Sep 13, 2017 | Jul 25, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub