Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemuUpgrade xen | Jul 2, 2018 | Jul 2, 2018 |
| Centos_linux | — | Upgrade qemu-kvm-debuginfoUpgrade kvm-toolsUpgrade kmod-kvmUpgrade qemu-imgUpgrade kmod-kvm-debugUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade kvmUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade kvm-qemu-imgUpgrade kvm-debuginfo | Feb 26, 2017 | Feb 10, 2017 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Feb 10, 2017 |
| Freebsd | — | Upgrade xen-tools | Feb 11, 2017 | Feb 11, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen.Upgrade app-emulation/qemu. | Oct 30, 2017 | Feb 21, 2017 |
| Oracle_linux | — | Upgrade kvm-qemu-imgUpgrade kvm-toolsUpgrade qemu-guest-agentUpgrade kvmUpgrade qemu-kvmUpgrade kmod-kvm-debugUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade kmod-kvmUpgrade qemu-kvm-tools | Feb 24, 2017 | Jan 24, 2017 |
| Redhat_linux | — | Upgrade kmod-kvmUpgrade kvm-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade kvm-qemu-imgUpgrade kvmUpgrade kmod-kvm-debugUpgrade kvm-toolsUpgrade qemu-guest-agentNo solution exists | Feb 24, 2017 | Feb 10, 2017 |
| Suse | — | Upgrade qemu-microvmUpgrade xenUpgrade qemu-audio-paUpgrade qemu-seabiosUpgrade qemu-s390Upgrade xen-doc-htmlUpgrade qemu-ui-cursesUpgrade qemu-audio-alsaUpgrade qemu-audio-ossUpgrade qemu-skibootUpgrade kvmUpgrade qemu-x86Upgrade xen-kmp-defaultUpgrade qemu-sgabiosUpgrade xen-tools-xendomains-wait-diskUpgrade xen-kmp-paeUpgrade qemu-armUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ksmUpgrade qemu-vgabiosUpgrade xen-tools-domUUpgrade qemu-hw-display-virtio-gpuUpgrade xen-toolsUpgrade qemu-langUpgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-doc-pdfUpgrade qemu-ui-spice-coreUpgrade qemu-hw-usb-redirectUpgrade xen-develUpgrade qemu-ui-spice-appUpgrade qemu-ppcUpgrade qemu-ipxeUpgrade qemu-guest-agentUpgrade qemu-block-curlUpgrade xen-libsUpgrade qemu-kvmUpgrade qemu-block-sshUpgrade qemu-toolsUpgrade xen-libs-32bitUpgrade qemu-ui-openglUpgrade qemu-audio-spiceUpgrade qemu-ui-gtkUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-s390xUpgrade qemu-chardev-baumUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-qxlUpgrade qemu | Feb 28, 2017 | Feb 10, 2017 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-s390x | Apr 21, 2017 | Feb 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub