Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemuUpgrade xen | Jul 27, 2018 | Jul 27, 2018 |
| Centos_linux | — | Upgrade qemu-kvm-debuginfoUpgrade qemu-kvmUpgrade kmod-kvm-debugUpgrade qemu-kvm-toolsUpgrade kvm-qemu-imgUpgrade kvm-debuginfoUpgrade kmod-kvmUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-guest-agentUpgrade kvm-toolsUpgrade kvm | Mar 1, 2017 | Feb 21, 2017 |
| Debian | — | Upgrade xenUpgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Feb 21, 2017 |
| Freebsd | — | Upgrade xen-tools | Feb 22, 2017 | Feb 22, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 28, 2017 |
| Oracle_linux | — | Upgrade kmod-kvmUpgrade kmod-kvm-debugUpgrade qemu-kvm-commonUpgrade kvm-toolsUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade kvmUpgrade qemu-kvm-toolsUpgrade kvm-qemu-img | Mar 2, 2017 | Feb 21, 2017 |
| Redhat_linux | — | Upgrade qemu-kvm-debuginfoUpgrade kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade kvm-debuginfoUpgrade kvm-qemu-imgUpgrade kvmUpgrade kmod-kvmUpgrade qemu-kvm-toolsUpgrade kmod-kvm-debugUpgrade qemu-imgNo solution exists | Mar 3, 2017 | Feb 21, 2017 |
| Suse | — | Upgrade qemu-audio-paUpgrade xenUpgrade qemu-chardev-baumUpgrade qemu-audio-alsaUpgrade qemu-s390Upgrade qemu-x86Upgrade qemu-microvmUpgrade xen-kmp-defaultUpgrade qemu-toolsUpgrade qemu-block-rbdUpgrade qemu-hw-usb-redirectUpgrade qemu-block-curlUpgrade xen-libs-32bitUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ksmUpgrade xen-doc-htmlUpgrade qemu-kvmUpgrade qemu-s390xUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-coreUpgrade kvmUpgrade qemu-sgabiosUpgrade qemu-vgabiosUpgrade qemu-langUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-spiceUpgrade qemu-hw-display-qxlUpgrade xen-kmp-paeUpgrade qemu-guest-agentUpgrade qemu-armUpgrade xen-tools-domuUpgrade xen-toolsUpgrade qemu-ui-spice-appUpgrade qemu-ui-openglUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-block-sshUpgrade qemu-ipxeUpgrade qemuUpgrade qemu-ppcUpgrade qemu-block-iscsiUpgrade qemu-seabiosUpgrade qemu-skibootUpgrade xen-libsUpgrade xen-develUpgrade xen-doc-pdfUpgrade qemu-chardev-spice | Feb 28, 2017 | Feb 21, 2017 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-s390x | Apr 21, 2017 | Feb 21, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub