Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xenUpgrade qemu | Jul 2, 2018 | Jul 2, 2018 |
| Centos_linux | — | Upgrade kvmUpgrade kvm-qemu-imgUpgrade qemu-kvmUpgrade kvm-debuginfoUpgrade qemu-guest-agentUpgrade kmod-kvmUpgrade kmod-kvm-debugUpgrade kvm-toolsUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm-debuginfo | Feb 26, 2017 | Feb 10, 2017 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Feb 10, 2017 |
| Freebsd | — | Upgrade xen-tools | Feb 11, 2017 | Feb 11, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen.Upgrade app-emulation/qemu. | Oct 30, 2017 | Feb 21, 2017 |
| Oracle_linux | — | Upgrade qemu-kvm-commonUpgrade kmod-kvmUpgrade qemu-kvm-toolsUpgrade kvmUpgrade kmod-kvm-debugUpgrade qemu-imgUpgrade qemu-kvmUpgrade kvm-qemu-imgUpgrade qemu-guest-agentUpgrade kvm-tools | Feb 24, 2017 | Jan 24, 2017 |
| Redhat_linux | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade kmod-kvmUpgrade kvm-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-guest-agentUpgrade kmod-kvm-debugUpgrade kvm-toolsUpgrade kvm-qemu-imgNo solution existsUpgrade qemu-kvm-commonUpgrade kvm | Feb 24, 2017 | Feb 10, 2017 |
| Suse | — | Upgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade xen-kmp-paeUpgrade qemu-audio-paUpgrade xenUpgrade qemu-microvmUpgrade qemu-seabiosUpgrade qemu-s390Upgrade xen-doc-htmlUpgrade qemu-audio-ossUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu-armUpgrade xen-tools-xendomains-wait-diskUpgrade xen-tools-domUUpgrade qemu-skibootUpgrade kvmUpgrade qemu-audio-alsaUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ksmUpgrade xen-kmp-defaultUpgrade qemu-ui-cursesUpgrade xen-toolsUpgrade xen-doc-pdfUpgrade qemu-ui-spice-coreUpgrade xen-develUpgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-qxlUpgrade qemu-block-curlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-kvmUpgrade qemu-chardev-spiceUpgrade qemu-chardev-baumUpgrade qemu-toolsUpgrade qemuUpgrade xen-libsUpgrade qemu-block-sshUpgrade qemu-guest-agentUpgrade qemu-audio-spiceUpgrade qemu-ipxeUpgrade xen-libs-32bitUpgrade qemu-ui-openglUpgrade qemu-ui-spice-appUpgrade qemu-ppcUpgrade qemu-langUpgrade qemu-ui-gtkUpgrade qemu-s390x | Feb 28, 2017 | Feb 10, 2017 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-mips | Apr 21, 2017 | Feb 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub