The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade qemu-kvm | Dec 22, 2017 | Oct 16, 2017 |
| Centos_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfoUpgrade qemu-img | Dec 7, 2017 | Oct 16, 2017 |
| Debian | — | Upgrade qemu | May 31, 2018 | Oct 16, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Jan 18, 2018 | Oct 16, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Jan 18, 2018 | Oct 16, 2017 |
| Oracle_linux | — | Upgrade qemu-system-aarch64-coreUpgrade qemu-system-x86-coreUpgrade qemu-kvm-commonUpgrade qemu-block-rbdUpgrade ivshmem-toolsUpgrade qemu-system-x86Upgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade qemuUpgrade qemu-imgUpgrade qemu-kvm-coreUpgrade qemu-commonUpgrade qemu-block-glusterUpgrade qemu-kvm-toolsUpgrade qemu-system-aarch64 | Dec 1, 2017 | Oct 11, 2017 |
| Redhat_linux | — | No solution existsUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-guest-agent | Dec 1, 2017 | Oct 16, 2017 |
| Suse | — | Upgrade xen-kmp-paeUpgrade qemu-block-iscsiUpgrade qemu-microvmUpgrade qemu-audio-paUpgrade qemu-ui-gtkUpgrade xen-tools-domuUpgrade qemu-vgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-x86Upgrade qemu-hw-usb-redirectUpgrade qemu-block-curlUpgrade qemu-s390Upgrade qemu-sgabiosUpgrade qemu-seabiosUpgrade qemu-kvmUpgrade qemu-ppcUpgrade qemu-guest-agentUpgrade qemu-ui-spice-coreUpgrade xenUpgrade qemu-ui-cursesUpgrade qemu-audio-alsaUpgrade qemu-ksmUpgrade qemu-chardev-baumUpgrade qemu-audio-ossUpgrade xen-develUpgrade qemu-audio-spiceUpgrade qemu-s390xUpgrade xen-libsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-qxlUpgrade xen-doc-pdfUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-chardev-spiceUpgrade xen-kmp-defaultUpgrade kvmUpgrade qemu-ui-spice-appUpgrade xen-libs-32bitUpgrade qemu-hw-display-virtio-vgaUpgrade xen-toolsUpgrade qemu-langUpgrade qemu-armUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-ui-openglUpgrade qemu-skibootUpgrade qemu-block-sshUpgrade qemu-ipxeUpgrade xen-doc-html | Nov 2, 2017 | Oct 16, 2017 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-ppc | Feb 21, 2018 | Oct 16, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub