Integer overflow in hw/virtio/virtio-crypto.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code on the host via a crafted virtio-crypto request, which triggers a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Mar 27, 2017 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Mar 27, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 27, 2017 |
| Oracle_linux | — | Upgrade qemu-block-rbdUpgrade qemu-system-x86-coreUpgrade qemu-kvmUpgrade ivshmem-toolsUpgrade qemu-commonUpgrade qemuUpgrade qemu-system-aarch64Upgrade qemu-kvm-coreUpgrade qemu-block-glusterUpgrade qemu-imgUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86 | Jul 11, 2019 | Jan 10, 2017 |
| Suse | — | Upgrade qemu-s390xUpgrade qemu-ppcUpgrade qemu-toolsUpgrade qemu-audio-paUpgrade qemu-armUpgrade qemu-chardev-spiceUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-langUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-x86Upgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-rbdUpgrade qemu-audio-ossUpgrade qemu-hw-display-qxlUpgrade qemu-guest-agentUpgrade qemuUpgrade qemu-ui-openglUpgrade qemu-block-sshUpgrade qemu-chardev-baumUpgrade qemu-block-curlUpgrade qemu-ui-cursesUpgrade qemu-audio-spiceUpgrade qemu-ui-gtkUpgrade qemu-block-iscsiUpgrade qemu-seabiosUpgrade qemu-ui-spice-appUpgrade qemu-vgabiosUpgrade qemu-s390Upgrade qemu-microvmUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-alsaUpgrade qemu-ipxeUpgrade qemu-kvmUpgrade qemu-ui-spice-coreUpgrade qemu-skibootUpgrade qemu-ksm | Jul 21, 2017 | Mar 27, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub