hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU consumption) via the message ring page count.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 19, 2019 | May 2, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | May 2, 2017 |
| Oracle_linux | — | Upgrade ivshmem-toolsUpgrade qemu-system-aarch64Upgrade qemuUpgrade qemu-system-x86Upgrade qemu-block-glusterUpgrade qemu-commonUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-coreUpgrade qemu-block-rbdUpgrade qemu-system-x86-core | May 15, 2019 | Apr 25, 2017 |
| Suse | — | Upgrade qemu-ui-spice-appUpgrade xen-toolsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-iscsiUpgrade qemu-ipxeUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-spiceUpgrade qemu-langUpgrade qemu-ksmUpgrade qemu-seabiosUpgrade xen-libs-32bitUpgrade qemu-audio-ossUpgrade qemu-chardev-spiceUpgrade qemu-guest-agentUpgrade xen-kmp-paeUpgrade qemuUpgrade xen-develUpgrade qemu-ui-openglUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-skibootUpgrade xen-kmp-defaultUpgrade qemu-s390xUpgrade xen-libsUpgrade qemu-armUpgrade qemu-ui-gtkUpgrade xen-tools-domUUpgrade qemu-toolsUpgrade qemu-audio-alsaUpgrade qemu-s390Upgrade qemu-audio-paUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-sgabiosUpgrade xenUpgrade qemu-x86Upgrade qemu-ui-spice-coreUpgrade qemu-block-curlUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-cursesUpgrade qemu-chardev-baumUpgrade xen-doc-htmlUpgrade qemu-vgabiosUpgrade qemu-ppcUpgrade qemu-kvmUpgrade qemu-microvm | Jul 4, 2017 | May 2, 2017 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-arm | Sep 13, 2017 | May 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub