The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade qemu-kvm | Dec 22, 2017 | Oct 16, 2017 |
| Centos_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-kvm | Dec 7, 2017 | Oct 16, 2017 |
| Debian | — | Upgrade qemu | May 31, 2018 | Oct 16, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Jan 18, 2018 | Oct 16, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Jan 18, 2018 | Oct 16, 2017 |
| Oracle_linux | — | Upgrade qemu-system-x86-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-system-x86Upgrade qemu-kvm-commonUpgrade ivshmem-toolsUpgrade qemu-kvmUpgrade qemu-kvm-coreUpgrade qemu-block-glusterUpgrade qemu-kvm-toolsUpgrade qemu-system-aarch64Upgrade qemuUpgrade qemu-imgUpgrade qemu-common | Dec 1, 2017 | Oct 11, 2017 |
| Redhat_linux | — | Upgrade qemu-kvm-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvm-toolsNo solution exists | Dec 1, 2017 | Oct 16, 2017 |
| Suse | — | Upgrade qemu-ksmUpgrade qemu-s390Upgrade qemu-kvmUpgrade qemu-ppcUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-spice-coreUpgrade qemu-x86Upgrade xen-kmp-paeUpgrade xen-tools-domUUpgrade qemu-chardev-baumUpgrade qemu-block-curlUpgrade qemu-vgabiosUpgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-hw-usb-redirectUpgrade qemu-microvmUpgrade qemu-guest-agentUpgrade qemu-seabiosUpgrade qemu-ui-gtkUpgrade qemu-ui-cursesUpgrade qemu-block-iscsiUpgrade qemu-sgabiosUpgrade xenUpgrade xen-doc-htmlUpgrade qemuUpgrade qemu-ui-openglUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-vgaUpgrade kvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-toolsUpgrade qemu-ipxeUpgrade qemu-armUpgrade qemu-block-sshUpgrade qemu-toolsUpgrade qemu-s390xUpgrade qemu-block-rbdUpgrade qemu-skibootUpgrade qemu-chardev-spiceUpgrade xen-libs-32bitUpgrade xen-libsUpgrade qemu-audio-spiceUpgrade xen-develUpgrade xen-kmp-defaultUpgrade xen-doc-pdfUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-ossUpgrade qemu-hw-display-qxlUpgrade qemu-lang | Nov 2, 2017 | Oct 16, 2017 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-misc | Feb 21, 2018 | Oct 16, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub