The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade qemu-kvm | Dec 22, 2017 | Oct 16, 2017 |
| Centos_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-guest-agent | Dec 7, 2017 | Oct 16, 2017 |
| Debian | — | Upgrade qemu | May 31, 2018 | Oct 16, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Jan 18, 2018 | Oct 16, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Jan 18, 2018 | Oct 16, 2017 |
| Oracle_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvmUpgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade qemu-kvm-commonUpgrade qemu-system-aarch64-coreUpgrade qemu-block-iscsiUpgrade qemu-system-x86Upgrade qemu-system-x86-coreUpgrade qemu-kvm-toolsUpgrade qemu-commonUpgrade qemu-system-aarch64Upgrade qemu-block-glusterUpgrade qemuUpgrade qemu-imgUpgrade qemu-kvm-core | Dec 1, 2017 | Oct 11, 2017 |
| Redhat_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-kvm-toolsNo solution exists | Dec 1, 2017 | Oct 16, 2017 |
| Suse | — | Upgrade qemu-audio-alsaUpgrade qemu-ui-spice-coreUpgrade qemu-kvmUpgrade xenUpgrade xen-kmp-paeUpgrade qemu-x86Upgrade qemu-ui-gtkUpgrade qemu-microvmUpgrade xen-tools-domuUpgrade qemu-s390Upgrade qemu-block-curlUpgrade qemu-sgabiosUpgrade qemu-guest-agentUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ksmUpgrade qemu-chardev-baumUpgrade qemu-ppcUpgrade qemu-seabiosUpgrade qemu-vgabiosUpgrade qemu-block-iscsiUpgrade qemu-audio-paUpgrade qemu-ui-cursesUpgrade qemu-hw-usb-redirectUpgrade xen-develUpgrade qemu-toolsUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-gpuUpgrade qemuUpgrade xen-kmp-defaultUpgrade qemu-armUpgrade xen-toolsUpgrade qemu-audio-ossUpgrade qemu-hw-display-qxlUpgrade qemu-langUpgrade xen-doc-htmlUpgrade qemu-hw-display-virtio-vgaUpgrade kvmUpgrade qemu-ui-spice-appUpgrade qemu-s390xUpgrade xen-doc-pdfUpgrade qemu-chardev-spiceUpgrade xen-libs-32bitUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-spiceUpgrade qemu-skibootUpgrade qemu-block-sshUpgrade qemu-block-rbdUpgrade xen-libsUpgrade qemu-ipxe | Nov 2, 2017 | Oct 16, 2017 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-sparc | Feb 21, 2018 | Oct 16, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub