Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, which trigger an out-of-bounds write.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade qemu-kvm | Dec 22, 2017 | Sep 8, 2017 |
| Centos_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-common | Dec 7, 2017 | Sep 8, 2017 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Dec 5, 2017 | Sep 8, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Jan 18, 2018 | Sep 8, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Jan 18, 2018 | Sep 8, 2017 |
| Oracle_linux | — | Upgrade qemu-block-glusterUpgrade qemu-system-aarch64Upgrade qemu-commonUpgrade ivshmem-toolsUpgrade qemu-system-x86-coreUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-kvm-commonUpgrade qemu-system-x86Upgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-kvm-coreUpgrade qemu-img | Dec 1, 2017 | Sep 5, 2017 |
| Redhat_linux | — | Upgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-common | Dec 1, 2017 | Sep 8, 2017 |
| Suse | — | Upgrade qemu-ui-openglUpgrade qemu-block-iscsiUpgrade qemu-skibootUpgrade qemu-seabiosUpgrade qemu-ui-spice-appUpgrade qemu-audio-paUpgrade qemu-ui-spice-coreUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-ossUpgrade qemu-ksmUpgrade qemu-hw-display-qxlUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-cursesUpgrade qemu-armUpgrade qemu-audio-alsaUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-chardev-baumUpgrade qemu-chardev-spiceUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-x86Upgrade qemuUpgrade qemu-kvmUpgrade qemu-ppcUpgrade qemu-microvmUpgrade qemu-guest-agentUpgrade qemu-s390Upgrade kvmUpgrade qemu-toolsUpgrade qemu-audio-spiceUpgrade qemu-block-sshUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-s390xUpgrade qemu-langUpgrade qemu-sgabiosUpgrade qemu-ipxeUpgrade qemu-ui-gtkUpgrade qemu-vgabios | Nov 2, 2017 | Sep 8, 2017 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system | Feb 21, 2018 | Sep 8, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub