The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service (assertion failure) in the cpu_physical_memory_snapshot_get_dirty function.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Aug 29, 2017 |
| Oracle_linux | — | Upgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86-coreUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade qemu-imgUpgrade qemuUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64Upgrade qemu-commonUpgrade qemu-system-x86Upgrade qemu-block-gluster | May 15, 2019 | Aug 24, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 24, 2017 |
| Suse | — | Upgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpuUpgrade qemuUpgrade qemu-s390xUpgrade qemu-ipxeUpgrade qemu-vgabiosUpgrade qemu-block-sshUpgrade qemu-armUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-audio-paUpgrade qemu-langUpgrade qemu-microvmUpgrade qemu-ppcUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-spiceUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-qxlUpgrade qemu-x86Upgrade qemu-toolsUpgrade qemu-audio-ossUpgrade qemu-chardev-baumUpgrade qemu-ui-gtkUpgrade qemu-block-iscsiUpgrade qemu-ui-openglUpgrade qemu-chardev-spiceUpgrade qemu-ui-spice-appUpgrade qemu-block-curlUpgrade qemu-hw-usb-redirectUpgrade qemu-ksmUpgrade qemu-s390Upgrade qemu-audio-alsaUpgrade qemu-ui-cursesUpgrade qemu-ui-spice-coreUpgrade qemu-seabiosUpgrade qemu-skiboot | May 20, 2018 | Aug 29, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub