Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC client updating its display after a VGA operation.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvm-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-kvm-common | May 10, 2017 | May 2, 2017 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | May 11, 2017 | May 2, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jul 25, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Nov 30, 2017 | Jul 25, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Nov 30, 2017 | Jul 25, 2017 |
| Oracle_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-img | May 9, 2017 | Mar 15, 2017 |
| Redhat_linux | — | Upgrade qemu-kvm-debuginfoNo solution existsUpgrade qemu-guest-agentUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-img | May 9, 2017 | May 2, 2017 |
| Suse | — | Upgrade qemu-ipxeUpgrade xen-libs-32bitUpgrade xen-doc-pdfUpgrade xen-doc-htmlUpgrade qemu-s390Upgrade qemu-sgabiosUpgrade kvmUpgrade qemu-kvmUpgrade xen-libsUpgrade qemu-seabiosUpgrade xen-kmp-defaultUpgrade qemu-x86Upgrade xen-toolsUpgrade qemu-block-curlUpgrade qemu-langUpgrade qemu-block-sshUpgrade xen-tools-domUUpgrade qemu-armUpgrade qemu-guest-agentUpgrade qemu-vgabiosUpgrade qemu-toolsUpgrade qemuUpgrade qemu-block-rbdUpgrade xen-develUpgrade qemu-ppcUpgrade xenUpgrade xen-kmp-pae | May 2, 2017 | May 2, 2017 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-sparc | May 17, 2017 | May 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub