The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error and QEMU process crash) by unsetting vring alignment while updating Virtio rings.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | May 31, 2018 | Dec 6, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Apr 9, 2018 | Dec 6, 2017 |
| Oracle_linux | — | Upgrade qemu-system-x86Upgrade qemu-imgUpgrade qemu-kvm-coreUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade ivshmem-toolsUpgrade qemu-system-aarch64Upgrade qemu-system-x86-coreUpgrade qemu-block-glusterUpgrade qemu-commonUpgrade qemu-block-rbdUpgrade qemu-kvmUpgrade qemu | May 15, 2019 | Nov 24, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 24, 2017 |
| Suse | — | Upgrade qemu-kvmUpgrade qemuUpgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade qemu-x86Upgrade qemu-armUpgrade qemu-seabiosUpgrade qemu-block-sshUpgrade qemu-toolsUpgrade qemu-block-rbdUpgrade qemu-langUpgrade qemu-block-iscsiUpgrade qemu-ppcUpgrade qemu-guest-agentUpgrade qemu-ipxeUpgrade qemu-block-curlUpgrade qemu-s390 | Mar 22, 2018 | Dec 6, 2017 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-mips | Feb 21, 2018 | Dec 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub