Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to cause a denial of service (QEMU instance crash) by leveraging failure to properly clear ifq_so from pending packets.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-kvm-debuginfoUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-tools | Apr 27, 2020 | Sep 1, 2017 |
| Amazon_linux | — | Upgrade qemu-kvm | Jun 12, 2018 | Sep 1, 2017 |
| Centos_linux | — | Upgrade qemu-kvm-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-img | Aug 28, 2019 | Sep 1, 2017 |
| Debian | — | Upgrade qemu | Dec 5, 2017 | Sep 1, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | May 29, 2018 | Sep 1, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | May 3, 2018 | Sep 1, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Jul 3, 2018 | Sep 1, 2017 |
| Oracle_linux | — | Upgrade qemuUpgrade qemu-block-rbdUpgrade qemu-kvm-commonUpgrade qemu-system-x86-coreUpgrade qemu-block-glusterUpgrade ivshmem-toolsUpgrade qemu-commonUpgrade qemu-block-iscsiUpgrade qemu-kvmUpgrade qemu-system-aarch64-coreUpgrade qemu-system-aarch64Upgrade qemu-kvm-toolsUpgrade qemu-kvm-coreUpgrade qemu-system-x86Upgrade qemu-img | Apr 19, 2018 | Aug 3, 2017 |
| Redhat_linux | — | No solution existsUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfo | Apr 11, 2018 | Sep 1, 2017 |
| Suse | — | Upgrade qemu-ui-spice-coreUpgrade qemu-toolsUpgrade qemu-sgabiosUpgrade qemu-ppcUpgrade qemu-ui-cursesUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-paUpgrade qemu-skibootUpgrade qemu-ui-spice-appUpgrade qemu-guest-agentUpgrade qemu-audio-ossUpgrade qemu-armUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-qxlUpgrade qemu-langUpgrade qemu-ui-openglUpgrade qemuUpgrade qemu-x86Upgrade qemu-audio-alsaUpgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade qemu-s390Upgrade qemu-microvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-chardev-spiceUpgrade qemu-block-sshUpgrade qemu-vgabiosUpgrade qemu-audio-spiceUpgrade qemu-block-curlUpgrade qemu-block-rbdUpgrade qemu-ipxeUpgrade qemu-kvmUpgrade qemu-ksmUpgrade qemu-seabiosUpgrade qemu-s390xUpgrade qemu-ui-gtk | Nov 2, 2017 | Sep 1, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub