QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors involving display update.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-kvm-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm | Apr 27, 2020 | Sep 1, 2017 |
| Amazon_linux | — | Upgrade qemu-kvm | Jun 12, 2018 | Sep 1, 2017 |
| Centos_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm | Jul 17, 2018 | Sep 1, 2017 |
| Debian | — | Upgrade qemu | Dec 5, 2017 | Sep 1, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Apr 9, 2018 | Sep 1, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | May 29, 2018 | Sep 1, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | May 3, 2018 | Sep 1, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Jul 3, 2018 | Sep 1, 2017 |
| Oracle_linux | — | Upgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-block-glusterUpgrade ivshmem-toolsUpgrade qemu-system-x86-coreUpgrade qemu-commonUpgrade qemu-imgUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-system-aarch64-coreUpgrade qemu-kvm-coreUpgrade qemuUpgrade qemu-block-iscsi | Apr 19, 2018 | Aug 24, 2017 |
| Redhat_linux | — | Upgrade qemu-kvmNo solution existsUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm-debuginfoUpgrade qemu-guest-agent | Apr 11, 2018 | Sep 1, 2017 |
| Suse | — | Upgrade qemu-hw-display-virtio-gpuUpgrade kvmUpgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-vgaUpgrade qemuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-cursesUpgrade qemu-sgabiosUpgrade xen-libsUpgrade qemu-toolsUpgrade qemu-ipxeUpgrade qemu-x86Upgrade qemu-audio-ossUpgrade xen-doc-htmlUpgrade qemu-ui-openglUpgrade qemu-hw-display-qxlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-armUpgrade xen-tools-domuUpgrade qemu-chardev-spiceUpgrade xen-libs-32bitUpgrade xen-develUpgrade qemu-ui-gtkUpgrade qemu-kvmUpgrade qemu-ppcUpgrade qemu-audio-alsaUpgrade qemu-ksmUpgrade qemu-vgabiosUpgrade qemu-microvmUpgrade xen-kmp-paeUpgrade qemu-ui-spice-coreUpgrade qemu-s390xUpgrade xenUpgrade qemu-guest-agentUpgrade qemu-chardev-baumUpgrade qemu-seabiosUpgrade xen-toolsUpgrade qemu-s390Upgrade qemu-block-rbdUpgrade qemu-langUpgrade xen-kmp-defaultUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-appUpgrade qemu-skibootUpgrade qemu-block-iscsiUpgrade qemu-block-sshUpgrade qemu-audio-paUpgrade qemu-block-curl | Nov 2, 2017 | Sep 1, 2017 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-arm | Feb 21, 2018 | Sep 1, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub