The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service (assertion failure) in the cpu_physical_memory_snapshot_get_dirty function.
CVSS Details
- CVSS 3.0 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Aug 29, 2017 |
| Oracle_linux | — | Upgrade qemu-system-x86Upgrade qemu-commonUpgrade qemuUpgrade qemu-block-glusterUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64Upgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade qemu-system-x86-coreUpgrade qemu-system-aarch64-coreUpgrade ivshmem-toolsUpgrade qemu-imgUpgrade qemu-kvm | May 15, 2019 | Aug 24, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 24, 2017 |
| Suse | — | Upgrade qemu-ppcUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-vgabiosUpgrade qemu-toolsUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-qxlUpgrade qemu-microvmUpgrade qemu-armUpgrade qemuUpgrade qemu-audio-spiceUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-guest-agentUpgrade qemu-ipxeUpgrade qemu-langUpgrade qemu-block-sshUpgrade qemu-sgabiosUpgrade qemu-s390xUpgrade qemu-x86Upgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-kvmUpgrade qemu-ui-cursesUpgrade qemu-hw-usb-redirectUpgrade qemu-seabiosUpgrade qemu-audio-alsaUpgrade qemu-ui-spice-coreUpgrade qemu-s390Upgrade qemu-block-iscsiUpgrade qemu-chardev-spiceUpgrade qemu-ksmUpgrade qemu-skibootUpgrade qemu-ui-openglUpgrade qemu-ui-gtkUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-appUpgrade qemu-block-curlUpgrade qemu-audio-oss | May 20, 2018 | Aug 29, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub