The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error and QEMU process crash) by unsetting vring alignment while updating Virtio rings.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | May 31, 2018 | Dec 6, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Apr 9, 2018 | Dec 6, 2017 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-coreUpgrade ivshmem-toolsUpgrade qemu-system-aarch64-coreUpgrade qemu-block-iscsiUpgrade qemu-system-x86Upgrade qemu-block-rbdUpgrade qemu-commonUpgrade qemu-kvmUpgrade qemu-block-glusterUpgrade qemu-system-aarch64Upgrade qemu-system-x86-coreUpgrade qemu | May 15, 2019 | Nov 24, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 24, 2017 |
| Suse | — | Upgrade qemu-sgabiosUpgrade qemuUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu-kvmUpgrade qemu-seabiosUpgrade qemu-block-iscsiUpgrade qemu-toolsUpgrade qemu-s390Upgrade qemu-ipxeUpgrade qemu-guest-agentUpgrade qemu-armUpgrade qemu-block-curlUpgrade qemu-block-sshUpgrade qemu-ppcUpgrade qemu-langUpgrade qemu-block-rbd | Mar 22, 2018 | Dec 6, 2017 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-ppc | Feb 21, 2018 | Dec 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub