The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to negative pitch.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Feb 19, 2019 | Jan 23, 2018 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Apr 9, 2018 | Jan 23, 2018 |
| Oracle_linux | — | Upgrade qemu-system-aarch64Upgrade qemu-system-aarch64-coreUpgrade qemu-block-glusterUpgrade qemuUpgrade ivshmem-toolsUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-block-rbdUpgrade qemu-commonUpgrade qemu-kvm-coreUpgrade qemu-block-iscsiUpgrade qemu-imgUpgrade qemu-system-x86-core | May 15, 2019 | Jan 25, 2017 |
| Suse | — | Upgrade qemuUpgrade xen-libsUpgrade xen-tools-domUUpgrade qemu-ppcUpgrade kvmUpgrade xen-toolsUpgrade xen-develUpgrade qemu-ipxeUpgrade qemu-guest-agentUpgrade qemu-toolsUpgrade qemu-armUpgrade xen-doc-htmlUpgrade qemu-x86Upgrade qemu-sgabiosUpgrade qemu-block-rbdUpgrade qemu-seabiosUpgrade xen-kmp-paeUpgrade qemu-block-curlUpgrade qemu-vgabiosUpgrade xen-doc-pdfUpgrade qemu-kvmUpgrade xen-libs-32bitUpgrade qemu-block-sshUpgrade xen-kmp-defaultUpgrade xenUpgrade qemu-langUpgrade qemu-s390 | Feb 15, 2018 | Jan 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub