hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.
CVSS Details
- CVSS 3.1 Base Score: 10
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | May 31, 2018 | Nov 17, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Apr 9, 2018 | Nov 17, 2017 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade qemu-block-iscsiUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86Upgrade qemu-system-x86-coreUpgrade qemuUpgrade qemu-commonUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-block-glusterUpgrade ivshmem-toolsUpgrade qemu-block-rbd | May 15, 2019 | Nov 15, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 15, 2017 |
| Suse | — | Upgrade qemu-block-rbdUpgrade qemu-ipxeUpgrade qemu-block-iscsiUpgrade qemu-s390Upgrade qemu-block-sshUpgrade qemu-langUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-toolsUpgrade qemuUpgrade qemu-block-curlUpgrade qemu-armUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu-sgabiosUpgrade qemu-seabiosUpgrade qemu-ppc | Mar 22, 2018 | Nov 17, 2017 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-misc | Feb 21, 2018 | Nov 17, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub