Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xenUpgrade qemu | Jul 27, 2018 | Jul 27, 2018 |
| Centos_linux | — | Upgrade kvmUpgrade qemu-guest-agentUpgrade qemu-kvm-commonUpgrade kvm-toolsUpgrade qemu-imgUpgrade qemu-kvmUpgrade kmod-kvm-debugUpgrade qemu-kvm-toolsUpgrade kmod-kvmUpgrade kvm-debuginfoUpgrade qemu-kvm-debuginfoUpgrade kvm-qemu-img | Mar 1, 2017 | Feb 21, 2017 |
| Debian | — | Upgrade xenUpgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Feb 21, 2017 |
| Freebsd | — | Upgrade xen-tools | Feb 22, 2017 | Feb 22, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 28, 2017 |
| Oracle_linux | — | Upgrade qemu-guest-agentUpgrade kvmUpgrade qemu-kvm-toolsUpgrade kvm-qemu-imgUpgrade qemu-kvmUpgrade kmod-kvmUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade kvm-toolsUpgrade kmod-kvm-debug | Mar 2, 2017 | Feb 21, 2017 |
| Redhat_linux | — | Upgrade kvmUpgrade qemu-imgUpgrade kmod-kvm-debugNo solution existsUpgrade kmod-kvmUpgrade qemu-kvm-toolsUpgrade kvm-toolsUpgrade kvm-qemu-imgUpgrade qemu-kvm-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-guest-agentUpgrade kvm-debuginfo | Mar 3, 2017 | Feb 21, 2017 |
| Suse | — | Upgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-sshUpgrade qemu-ppcUpgrade qemu-block-iscsiUpgrade qemu-armUpgrade xen-develUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-cursesUpgrade xen-doc-pdfUpgrade qemu-guest-agentUpgrade xen-kmp-paeUpgrade qemu-hw-display-qxlUpgrade qemu-audio-ossUpgrade qemu-chardev-spiceUpgrade qemuUpgrade qemu-hw-display-virtio-vgaUpgrade xen-tools-domuUpgrade xen-toolsUpgrade qemu-ui-spice-appUpgrade qemu-ui-openglUpgrade qemu-audio-spiceUpgrade qemu-toolsUpgrade qemu-chardev-baumUpgrade qemu-s390xUpgrade qemu-vgabiosUpgrade qemu-ui-spice-coreUpgrade qemu-ui-gtkUpgrade xen-doc-htmlUpgrade qemu-audio-paUpgrade xen-libs-32bitUpgrade qemu-block-curlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-kvmUpgrade xen-kmp-defaultUpgrade qemu-ksmUpgrade qemu-s390Upgrade qemu-microvmUpgrade qemu-x86Upgrade qemu-hw-usb-redirectUpgrade xenUpgrade kvmUpgrade qemu-audio-alsaUpgrade qemu-block-rbdUpgrade qemu-sgabios | Feb 28, 2017 | Feb 21, 2017 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-ppc | Apr 21, 2017 | Feb 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub