QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfo | Apr 27, 2020 | Sep 1, 2017 |
| Amazon_linux | — | Upgrade qemu-kvm | Jun 12, 2018 | Sep 1, 2017 |
| Centos_linux | — | Upgrade qemu-kvm-debuginfoUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-guest-agent | Jul 17, 2018 | Sep 1, 2017 |
| Debian | — | Upgrade qemu | Dec 5, 2017 | Sep 1, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Apr 9, 2018 | Sep 1, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | May 29, 2018 | Sep 1, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | May 3, 2018 | Sep 1, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Jul 3, 2018 | Sep 1, 2017 |
| Oracle_linux | — | Upgrade qemu-block-glusterUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade ivshmem-toolsUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-kvm-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-block-iscsiUpgrade qemu-guest-agentUpgrade qemu-system-x86-coreUpgrade qemu-commonUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-img | Apr 19, 2018 | Aug 24, 2017 |
| Redhat_linux | — | Upgrade qemu-imgNo solution existsUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade qemu-guest-agent | Apr 11, 2018 | Sep 1, 2017 |
| Suse | — | Upgrade qemu-chardev-baumUpgrade qemu-guest-agentUpgrade qemu-langUpgrade xen-kmp-defaultUpgrade qemu-skibootUpgrade qemu-audio-paUpgrade qemu-block-sshUpgrade qemu-ui-spice-appUpgrade qemu-block-rbdUpgrade qemu-ppcUpgrade qemu-audio-alsaUpgrade xen-toolsUpgrade qemu-kvmUpgrade qemu-s390Upgrade qemu-ui-gtkUpgrade qemu-microvmUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-coreUpgrade qemu-block-curlUpgrade qemu-seabiosUpgrade xen-kmp-paeUpgrade xenUpgrade qemu-block-iscsiUpgrade qemu-s390xUpgrade qemu-ksmUpgrade qemu-vgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade kvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-gpuUpgrade xen-libsUpgrade qemu-audio-spiceUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade qemu-ipxeUpgrade qemu-hw-display-qxlUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-vgaUpgrade qemuUpgrade qemu-ui-openglUpgrade qemu-armUpgrade qemu-ui-cursesUpgrade qemu-chardev-spiceUpgrade xen-develUpgrade xen-tools-domuUpgrade xen-libs-32bitUpgrade xen-doc-htmlUpgrade qemu-x86 | Nov 2, 2017 | Sep 1, 2017 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-aarch64Upgrade qemu-system-misc | Feb 21, 2018 | Sep 1, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub