Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemuUpgrade xen | Jul 2, 2018 | Jul 2, 2018 |
| Centos_linux | — | Upgrade kvm-debuginfoUpgrade qemu-kvmUpgrade kvmUpgrade kvm-qemu-imgUpgrade qemu-guest-agentUpgrade kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-imgUpgrade kmod-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade kmod-kvm-debug | Feb 26, 2017 | Feb 10, 2017 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Feb 10, 2017 |
| Freebsd | — | Upgrade xen-tools | Feb 11, 2017 | Feb 11, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu.Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen. | Oct 30, 2017 | Feb 21, 2017 |
| Oracle_linux | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade kvm-toolsUpgrade kvmUpgrade kvm-qemu-imgUpgrade qemu-guest-agentUpgrade kmod-kvm-debugUpgrade qemu-kvm-toolsUpgrade kmod-kvmUpgrade qemu-kvm-common | Feb 24, 2017 | Jan 24, 2017 |
| Redhat_linux | — | Upgrade kvm-toolsUpgrade kvm-qemu-imgUpgrade qemu-kvm-commonUpgrade kmod-kvm-debugUpgrade kvmNo solution existsUpgrade qemu-guest-agentUpgrade kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade kmod-kvmUpgrade qemu-kvm-debuginfoUpgrade qemu-img | Feb 24, 2017 | Feb 10, 2017 |
| Suse | — | Upgrade qemu-audio-paUpgrade xenUpgrade qemu-skibootUpgrade qemu-microvmUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-vgaUpgrade xen-kmp-defaultUpgrade xen-tools-domUUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade xen-kmp-paeUpgrade xen-doc-htmlUpgrade qemu-s390Upgrade qemu-ksmUpgrade qemu-sgabiosUpgrade qemu-audio-ossUpgrade kvmUpgrade qemu-armUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-alsaUpgrade qemu-ui-cursesUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-appUpgrade xen-develUpgrade xen-libsUpgrade qemuUpgrade xen-libs-32bitUpgrade qemu-hw-display-qxlUpgrade qemu-ppcUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-usb-redirectUpgrade xen-doc-pdfUpgrade qemu-ipxeUpgrade xen-toolsUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-coreUpgrade qemu-kvmUpgrade qemu-block-sshUpgrade qemu-toolsUpgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-langUpgrade qemu-ui-openglUpgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-chardev-spiceUpgrade qemu-s390x | Feb 28, 2017 | Feb 10, 2017 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-arm | Apr 21, 2017 | Feb 10, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub