hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 19, 2019 | May 2, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | May 2, 2017 |
| Oracle_linux | — | Upgrade qemu-system-x86Upgrade qemuUpgrade ivshmem-toolsUpgrade qemu-block-glusterUpgrade qemu-system-aarch64Upgrade qemu-commonUpgrade qemu-block-iscsiUpgrade qemu-system-x86-coreUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-system-aarch64-coreUpgrade qemu-block-rbd | May 15, 2019 | Apr 25, 2017 |
| Suse | — | Upgrade qemu-block-curlUpgrade qemu-sgabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-gtkUpgrade qemu-kvmUpgrade qemu-microvmUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade qemu-chardev-baumUpgrade qemu-audio-alsaUpgrade qemu-ui-spice-coreUpgrade qemu-toolsUpgrade qemu-ui-cursesUpgrade qemu-ppcUpgrade qemu-s390Upgrade xen-doc-htmlUpgrade xenUpgrade xen-tools-domUUpgrade qemu-audio-paUpgrade qemu-audio-spiceUpgrade xen-toolsUpgrade qemu-block-rbdUpgrade qemu-ksmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-armUpgrade qemu-hw-display-virtio-gpuUpgrade xen-libs-32bitUpgrade qemu-skibootUpgrade xen-libsUpgrade qemu-seabiosUpgrade qemu-audio-ossUpgrade qemu-ipxeUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-appUpgrade qemu-ui-openglUpgrade qemu-guest-agentUpgrade xen-kmp-paeUpgrade qemuUpgrade qemu-hw-display-qxlUpgrade qemu-s390xUpgrade xen-develUpgrade qemu-block-sshUpgrade qemu-chardev-spiceUpgrade xen-kmp-defaultUpgrade qemu-langUpgrade qemu-hw-display-virtio-vga | Jul 4, 2017 | May 2, 2017 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-aarch64 | Sep 13, 2017 | May 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub