Heap-based buffer overflow in Cirrus CLGD 54xx VGA Emulator in Quick Emulator (Qemu) 2.8 and earlier allows local guest OS users to execute arbitrary code or cause a denial of service (crash) via vectors related to a VNC client updating its display after a VGA operation.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvm-debuginfoUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-kvm-common | May 10, 2017 | May 2, 2017 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | May 11, 2017 | May 2, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jul 25, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | Nov 30, 2017 | Jul 25, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Nov 30, 2017 | Jul 25, 2017 |
| Oracle_linux | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-kvm-common | May 9, 2017 | Mar 15, 2017 |
| Redhat_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-guest-agentNo solution existsUpgrade qemu-kvm-debuginfo | May 9, 2017 | May 2, 2017 |
| Suse | — | Upgrade xen-libsUpgrade qemu-kvmUpgrade qemu-seabiosUpgrade kvmUpgrade xen-kmp-defaultUpgrade xen-toolsUpgrade xen-libs-32bitUpgrade qemu-ipxeUpgrade xen-doc-pdfUpgrade xen-doc-htmlUpgrade qemu-x86Upgrade qemu-s390Upgrade qemu-sgabiosUpgrade qemu-block-sshUpgrade xen-kmp-paeUpgrade qemu-block-rbdUpgrade qemu-ppcUpgrade qemu-langUpgrade xenUpgrade qemu-block-curlUpgrade xen-develUpgrade qemuUpgrade qemu-toolsUpgrade qemu-vgabiosUpgrade xen-tools-domuUpgrade qemu-armUpgrade qemu-guest-agent | May 2, 2017 | May 2, 2017 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-s390x | May 17, 2017 | May 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub