The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to negative pitch.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Feb 19, 2019 | Jan 23, 2018 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Apr 9, 2018 | Jan 23, 2018 |
| Oracle_linux | — | Upgrade qemu-commonUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade qemu-system-x86-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemuUpgrade qemu-system-aarch64Upgrade ivshmem-toolsUpgrade qemu-block-gluster | May 15, 2019 | Jan 25, 2017 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade qemu-seabiosUpgrade xenUpgrade qemu-s390Upgrade qemu-kvmUpgrade qemu-block-sshUpgrade xen-libs-32bitUpgrade qemu-langUpgrade xen-kmp-paeUpgrade qemu-block-curlUpgrade xen-doc-pdfUpgrade qemu-vgabiosUpgrade qemu-ipxeUpgrade xen-tools-domuUpgrade qemu-guest-agentUpgrade kvmUpgrade xen-develUpgrade xen-toolsUpgrade qemuUpgrade xen-libsUpgrade qemu-sgabiosUpgrade qemu-ppcUpgrade qemu-x86Upgrade qemu-toolsUpgrade qemu-armUpgrade xen-doc-htmlUpgrade qemu-block-rbd | Feb 15, 2018 | Jan 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub