hw/display/cirrus_vga_rop.h in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) via vectors related to copying VGA data via the cirrus_bitblt_rop_fwd_transp_ and cirrus_bitblt_rop_fwd_ functions.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | centos-upgrade-qemu-guest-agentcentos-upgrade-qemu-imgcentos-upgrade-qemu-kvmcentos-upgrade-qemu-kvm-commoncentos-upgrade-qemu-kvm-debuginfocentos-upgrade-qemu-kvm-tools | May 10, 2017 | Apr 20, 2017 |
| Debian | debian-upgrade-qemudebian-upgrade-qemu-kvm | May 11, 2017 | Apr 20, 2017 | |
| Gentoo Linux | gentoo-linux-upgrade-app-emulation-qemu | Oct 30, 2017 | Apr 20, 2017 | |
| Huawei Euleros 2_0_sp1 | huawei-euleros-2_0_sp1-upgrade-qemu-img | Nov 30, 2017 | Apr 20, 2017 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-qemu-imghuawei-euleros-2_0_sp2-upgrade-qemu-kvmhuawei-euleros-2_0_sp2-upgrade-qemu-kvm-common | Nov 30, 2017 | Apr 20, 2017 | |
| Oracle_linux | — | oracle-linux-upgrade-qemu-guest-agentoracle-linux-upgrade-qemu-imgoracle-linux-upgrade-qemu-kvmoracle-linux-upgrade-qemu-kvm-commonoracle-linux-upgrade-qemu-kvm-tools | May 9, 2017 | Mar 14, 2017 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-qemu-guest-agentredhat-upgrade-qemu-imgredhat-upgrade-qemu-kvmredhat-upgrade-qemu-kvm-commonredhat-upgrade-qemu-kvm-debuginforedhat-upgrade-qemu-kvm-tools | May 9, 2017 | Apr 20, 2017 | |
| Suse | — | suse-upgrade-kvmsuse-upgrade-qemususe-upgrade-qemu-armsuse-upgrade-qemu-block-curlsuse-upgrade-qemu-block-rbdsuse-upgrade-qemu-block-sshsuse-upgrade-qemu-guest-agentsuse-upgrade-qemu-ipxesuse-upgrade-qemu-kvmsuse-upgrade-qemu-langsuse-upgrade-qemu-ppcsuse-upgrade-qemu-s390suse-upgrade-qemu-seabiossuse-upgrade-qemu-sgabiossuse-upgrade-qemu-toolssuse-upgrade-qemu-vgabiossuse-upgrade-qemu-x86suse-upgrade-xensuse-upgrade-xen-develsuse-upgrade-xen-doc-htmlsuse-upgrade-xen-doc-pdfsuse-upgrade-xen-kmp-defaultsuse-upgrade-xen-kmp-paesuse-upgrade-xen-libssuse-upgrade-xen-libs-32bitsuse-upgrade-xen-toolssuse-upgrade-xen-tools-domu | May 2, 2017 | Apr 20, 2017 |
| Ubuntu | ubuntu-upgrade-qemu-systemubuntu-upgrade-qemu-system-aarch64ubuntu-upgrade-qemu-system-armubuntu-upgrade-qemu-system-mipsubuntu-upgrade-qemu-system-miscubuntu-upgrade-qemu-system-ppcubuntu-upgrade-qemu-system-s390xubuntu-upgrade-qemu-system-sparcubuntu-upgrade-qemu-system-x86 | May 17, 2017 | Apr 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub