The sdhci_sdma_transfer_multi_blocks function in hw/sd/sdhci.c in QEMU (aka Quick Emulator) allows local OS guest privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors involving the transfer mode register during multi block transfer.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 19, 2019 | Mar 20, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 20, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Nov 19, 2019 | Mar 20, 2017 |
| Suse | — | Upgrade qemu-block-sshUpgrade qemu-kvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-toolsUpgrade qemu-vgabiosUpgrade qemuUpgrade qemu-ipxeUpgrade qemu-langUpgrade qemu-sgabiosUpgrade qemu-s390xUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-microvmUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-spiceUpgrade qemu-block-rbdUpgrade qemu-hw-usb-redirectUpgrade qemu-x86Upgrade qemu-chardev-spiceUpgrade qemu-ppcUpgrade qemu-audio-paUpgrade qemu-guest-agentUpgrade qemu-chardev-baumUpgrade qemu-hw-display-qxlUpgrade qemu-block-curlUpgrade qemu-armUpgrade qemu-seabiosUpgrade qemu-s390Upgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-spice-appUpgrade qemu-ui-cursesUpgrade qemu-ui-openglUpgrade qemu-skibootUpgrade qemu-ksmUpgrade qemu-ui-gtkUpgrade qemu-audio-alsaUpgrade qemu-block-iscsiUpgrade qemu-audio-ossUpgrade qemu-ui-spice-core | Jul 4, 2017 | Mar 20, 2017 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system | Apr 21, 2017 | Mar 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub