Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to cause a denial of service (QEMU instance crash) by leveraging failure to properly clear ifq_so from pending packets.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade qemu-img | Apr 27, 2020 | Sep 1, 2017 |
| Amazon_linux | — | Upgrade qemu-kvm | Jun 12, 2018 | Sep 1, 2017 |
| Centos_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-img | Aug 28, 2019 | Sep 1, 2017 |
| Debian | — | Upgrade qemu | Dec 5, 2017 | Sep 1, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | May 29, 2018 | Sep 1, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | May 3, 2018 | Sep 1, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Jul 3, 2018 | Sep 1, 2017 |
| Oracle_linux | — | Upgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-system-aarch64Upgrade qemu-kvm-toolsUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-kvm-commonUpgrade ivshmem-toolsUpgrade qemu-commonUpgrade qemu-block-glusterUpgrade qemu-block-iscsiUpgrade qemu-system-x86-core | Apr 19, 2018 | Aug 3, 2017 |
| Redhat_linux | — | No solution existsUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-kvm-debuginfo | Apr 11, 2018 | Sep 1, 2017 |
| Suse | — | Upgrade qemu-s390xUpgrade qemu-ksmUpgrade qemu-chardev-spiceUpgrade qemu-kvmUpgrade qemu-seabiosUpgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-microvmUpgrade qemu-block-rbdUpgrade qemu-ipxeUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390Upgrade qemu-block-curlUpgrade qemu-chardev-baumUpgrade qemu-audio-spiceUpgrade qemu-block-sshUpgrade qemu-vgabiosUpgrade qemu-ui-gtkUpgrade qemu-sgabiosUpgrade qemu-audio-ossUpgrade qemu-ppcUpgrade qemu-ui-spice-coreUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-armUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-spice-appUpgrade qemu-ui-cursesUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-paUpgrade qemu-toolsUpgrade qemu-x86Upgrade qemu-langUpgrade qemu-skibootUpgrade qemuUpgrade qemu-guest-agentUpgrade qemu-ui-openglUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-gpu-pci | Nov 2, 2017 | Sep 1, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub