The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error and QEMU process crash) by unsetting vring alignment while updating Virtio rings.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | May 31, 2018 | Dec 6, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Apr 9, 2018 | Dec 6, 2017 |
| Oracle_linux | — | Upgrade qemu-system-x86-coreUpgrade qemu-block-rbdUpgrade qemu-block-glusterUpgrade qemu-commonUpgrade qemu-kvmUpgrade qemuUpgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86Upgrade qemu-kvm-coreUpgrade ivshmem-tools | May 15, 2019 | Nov 24, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Nov 24, 2017 |
| Suse | — | Upgrade qemu-kvmUpgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade qemuUpgrade qemu-x86Upgrade qemu-langUpgrade qemu-block-rbdUpgrade qemu-ppcUpgrade qemu-ipxeUpgrade qemu-guest-agentUpgrade qemu-toolsUpgrade qemu-seabiosUpgrade qemu-armUpgrade qemu-block-sshUpgrade qemu-s390Upgrade qemu-block-curlUpgrade qemu-block-iscsi | Mar 22, 2018 | Dec 6, 2017 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-s390x | Feb 21, 2018 | Dec 6, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub