The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service (assertion failure) in the cpu_physical_memory_snapshot_get_dirty function.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Aug 29, 2017 |
| Oracle_linux | — | Upgrade qemu-block-glusterUpgrade qemuUpgrade qemu-system-x86Upgrade qemu-kvm-coreUpgrade qemu-system-aarch64Upgrade qemu-commonUpgrade qemu-system-x86-coreUpgrade qemu-block-iscsiUpgrade ivshmem-toolsUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-block-rbdUpgrade qemu-system-aarch64-core | May 15, 2019 | Aug 24, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 24, 2017 |
| Suse | — | Upgrade qemu-vgabiosUpgrade qemu-kvmUpgrade qemu-microvmUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-armUpgrade qemu-sgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-rbdUpgrade qemu-audio-paUpgrade qemu-audio-spiceUpgrade qemu-block-sshUpgrade qemu-guest-agentUpgrade qemu-langUpgrade qemu-ipxeUpgrade qemu-s390xUpgrade qemu-x86Upgrade qemuUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-qxlUpgrade qemu-ppcUpgrade qemu-chardev-spiceUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-appUpgrade qemu-block-curlUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-cursesUpgrade qemu-seabiosUpgrade qemu-ui-spice-coreUpgrade qemu-audio-ossUpgrade qemu-ui-openglUpgrade qemu-ksmUpgrade qemu-chardev-baumUpgrade qemu-ui-gtkUpgrade qemu-audio-alsaUpgrade qemu-skibootUpgrade qemu-s390 | May 20, 2018 | Aug 29, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub