Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemuUpgrade xen | Jul 2, 2018 | Jul 2, 2018 |
| Centos_linux | — | Upgrade kvm-toolsUpgrade kmod-kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade kmod-kvm-debugUpgrade qemu-kvm-debuginfoUpgrade kvm-qemu-imgUpgrade kvm-debuginfoUpgrade qemu-guest-agentUpgrade kvmUpgrade qemu-kvm | Feb 26, 2017 | Feb 10, 2017 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Feb 10, 2017 |
| Freebsd | — | Upgrade xen-tools | Feb 11, 2017 | Feb 11, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen.Upgrade app-emulation/qemu. | Oct 30, 2017 | Feb 21, 2017 |
| Oracle_linux | — | Upgrade qemu-guest-agentUpgrade kvm-toolsUpgrade kmod-kvm-debugUpgrade kvm-qemu-imgUpgrade qemu-kvmUpgrade qemu-imgUpgrade kvmUpgrade kmod-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-common | Feb 24, 2017 | Jan 24, 2017 |
| Redhat_linux | — | Upgrade kvm-toolsUpgrade kvm-qemu-imgUpgrade kmod-kvm-debugUpgrade kvmUpgrade qemu-guest-agentUpgrade qemu-kvm-commonNo solution existsUpgrade qemu-imgUpgrade kvm-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-kvmUpgrade kmod-kvmUpgrade qemu-kvm-tools | Feb 24, 2017 | Feb 10, 2017 |
| Suse | — | Upgrade qemu-langUpgrade xen-libsUpgrade xen-libs-32bitUpgrade qemu-audio-spiceUpgrade qemu-block-iscsiUpgrade qemu-ui-openglUpgrade xen-tools-domuUpgrade qemu-guest-agentUpgrade qemu-ipxeUpgrade qemu-hw-usb-redirectUpgrade xen-doc-pdfUpgrade qemu-ui-spice-coreUpgrade xen-toolsUpgrade xen-develUpgrade qemu-ui-spice-appUpgrade qemu-chardev-baumUpgrade qemu-ppcUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-kvmUpgrade qemu-chardev-spiceUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-gtkUpgrade qemu-block-rbdUpgrade qemu-s390xUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade qemu-block-curlUpgrade qemu-block-sshUpgrade qemu-skibootUpgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-vgaUpgrade kvmUpgrade qemu-microvmUpgrade qemu-audio-paUpgrade xenUpgrade qemu-seabiosUpgrade xen-doc-htmlUpgrade qemu-sgabiosUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-armUpgrade qemu-vgabiosUpgrade qemu-audio-alsaUpgrade qemu-ksmUpgrade qemu-x86Upgrade qemu-audio-ossUpgrade xen-kmp-paeUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-s390Upgrade qemu-ui-curses | Feb 28, 2017 | Feb 10, 2017 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system | Apr 21, 2017 | Feb 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub