The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access and Qemu process crash) via vectors related to dst calculation.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade qemu-kvm | Dec 22, 2017 | Oct 16, 2017 |
| Centos_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 7, 2017 | Oct 16, 2017 |
| Debian | — | Upgrade qemu | May 31, 2018 | Oct 16, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Jan 18, 2018 | Oct 16, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Jan 18, 2018 | Oct 16, 2017 |
| Oracle_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-block-glusterUpgrade qemu-system-aarch64Upgrade qemu-commonUpgrade qemuUpgrade qemu-imgUpgrade qemu-kvm-coreUpgrade qemu-guest-agentUpgrade qemu-system-aarch64-coreUpgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade qemu-system-x86-coreUpgrade qemu-block-iscsiUpgrade qemu-system-x86Upgrade qemu-kvm-commonUpgrade qemu-kvm | Dec 1, 2017 | Oct 11, 2017 |
| Redhat_linux | — | Upgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-kvm-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-commonNo solution existsUpgrade qemu-kvm-tools | Dec 1, 2017 | Oct 16, 2017 |
| Suse | — | Upgrade qemu-sgabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-chardev-baumUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade xen-kmp-paeUpgrade qemu-s390Upgrade xenUpgrade qemu-vgabiosUpgrade qemu-audio-paUpgrade qemu-ui-spice-coreUpgrade qemu-microvmUpgrade qemu-seabiosUpgrade qemu-ui-gtkUpgrade qemu-ppcUpgrade qemu-audio-alsaUpgrade qemu-ksmUpgrade qemu-ui-cursesUpgrade qemu-guest-agentUpgrade xen-tools-domUUpgrade qemu-block-curlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-x86Upgrade qemu-hw-display-qxlUpgrade xen-develUpgrade xen-doc-htmlUpgrade xen-libsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-s390xUpgrade xen-doc-pdfUpgrade kvmUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-toolsUpgrade xen-libs-32bitUpgrade qemu-ui-spice-appUpgrade qemu-chardev-spiceUpgrade xen-kmp-defaultUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-sshUpgrade xen-toolsUpgrade qemu-ipxeUpgrade qemu-armUpgrade qemu-ui-openglUpgrade qemu-langUpgrade qemu-audio-ossUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-audio-spice | Nov 2, 2017 | Oct 16, 2017 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-x86 | Feb 21, 2018 | Oct 16, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub