The cirrus_invalidate_region function in hw/display/cirrus_vga.c in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds array access and QEMU process crash) via vectors related to negative pitch.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Feb 19, 2019 | Jan 23, 2018 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Apr 9, 2018 | Jan 23, 2018 |
| Oracle_linux | — | Upgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-system-aarch64-coreUpgrade ivshmem-toolsUpgrade qemuUpgrade qemu-system-aarch64Upgrade qemu-block-glusterUpgrade qemu-system-x86-coreUpgrade qemu-imgUpgrade qemu-commonUpgrade qemu-kvm-coreUpgrade qemu-block-iscsiUpgrade qemu-block-rbd | May 15, 2019 | Jan 25, 2017 |
| Suse | — | Upgrade qemu-x86Upgrade qemu-sgabiosUpgrade qemu-armUpgrade xen-tools-domuUpgrade xen-develUpgrade qemu-ipxeUpgrade kvmUpgrade qemu-toolsUpgrade xen-toolsUpgrade qemu-ppcUpgrade qemu-block-rbdUpgrade qemuUpgrade xen-doc-htmlUpgrade qemu-guest-agentUpgrade xen-libsUpgrade qemu-langUpgrade qemu-seabiosUpgrade qemu-kvmUpgrade qemu-block-sshUpgrade qemu-vgabiosUpgrade xen-doc-pdfUpgrade xen-kmp-defaultUpgrade qemu-block-curlUpgrade xenUpgrade xen-kmp-paeUpgrade qemu-s390Upgrade xen-libs-32bit | Feb 15, 2018 | Jan 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub