Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC client updating its display after a VGA operation.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-kvm-common | May 10, 2017 | May 2, 2017 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | May 11, 2017 | May 2, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jul 25, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Nov 30, 2017 | Jul 25, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Nov 30, 2017 | Jul 25, 2017 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-guest-agent | May 9, 2017 | Mar 15, 2017 |
| Redhat_linux | — | No solution existsUpgrade qemu-guest-agentUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | May 9, 2017 | May 2, 2017 |
| Suse | — | Upgrade qemu-ppcUpgrade xenUpgrade qemu-block-rbdUpgrade qemu-vgabiosUpgrade qemu-toolsUpgrade qemu-block-curlUpgrade xen-kmp-paeUpgrade qemu-block-sshUpgrade qemuUpgrade xen-develUpgrade qemu-armUpgrade qemu-guest-agentUpgrade xen-tools-domuUpgrade qemu-langUpgrade qemu-kvmUpgrade xen-doc-htmlUpgrade qemu-x86Upgrade xen-libs-32bitUpgrade qemu-seabiosUpgrade qemu-ipxeUpgrade xen-doc-pdfUpgrade qemu-s390Upgrade xen-toolsUpgrade xen-libsUpgrade xen-kmp-defaultUpgrade kvmUpgrade qemu-sgabios | May 2, 2017 | May 2, 2017 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-misc | May 17, 2017 | May 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub