Integer overflow in hw/virtio/virtio-crypto.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code on the host via a crafted virtio-crypto request, which triggers a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Mar 27, 2017 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Mar 27, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 27, 2017 |
| Oracle_linux | — | Upgrade qemuUpgrade ivshmem-toolsUpgrade qemu-kvmUpgrade qemu-system-x86-coreUpgrade qemu-block-rbdUpgrade qemu-commonUpgrade qemu-system-aarch64Upgrade qemu-kvm-coreUpgrade qemu-system-x86Upgrade qemu-system-aarch64-coreUpgrade qemu-imgUpgrade qemu-block-glusterUpgrade qemu-block-iscsi | Jul 11, 2019 | Jan 10, 2017 |
| Suse | — | Upgrade qemu-ui-gtkUpgrade qemu-ui-cursesUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-appUpgrade qemu-ipxeUpgrade qemu-block-iscsiUpgrade qemu-kvmUpgrade qemu-ui-spice-coreUpgrade qemu-skibootUpgrade qemu-audio-spiceUpgrade qemu-s390Upgrade qemu-vgabiosUpgrade qemu-block-curlUpgrade qemu-microvmUpgrade qemu-seabiosUpgrade qemu-audio-alsaUpgrade qemu-hw-usb-redirectUpgrade qemu-ksmUpgrade qemu-ppcUpgrade qemu-armUpgrade qemu-toolsUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-paUpgrade qemu-hw-display-qxlUpgrade qemu-sgabiosUpgrade qemu-block-sshUpgrade qemu-s390xUpgrade qemu-audio-ossUpgrade qemu-x86Upgrade qemu-ui-openglUpgrade qemu | Jul 21, 2017 | Mar 27, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub