Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-img | Sep 27, 2019 | Oct 16, 2018 |
| Debian | — | Upgrade qemu | Nov 12, 2018 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 4, 2019 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Apr 16, 2020 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Nov 19, 2019 | Oct 16, 2018 |
| Oracle_linux | — | Upgrade qemu-system-aarch64-coreUpgrade qemu-kvm-coreUpgrade qemu-block-iscsiUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-kvm-toolsUpgrade qemu-system-x86-coreUpgrade qemu-block-glusterUpgrade qemu-block-rbdUpgrade qemu-commonUpgrade qemuUpgrade ivshmem-toolsUpgrade qemu-guest-agent | Oct 30, 2018 | Sep 26, 2018 |
| Redhat_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm-debuginfoUpgrade qemu-kvmUpgrade qemu-guest-agentNo solution exists | Sep 25, 2019 | Oct 16, 2018 |
| Suse | — | Upgrade kvmUpgrade qemu-audio-spiceUpgrade qemu-ui-openglUpgrade qemu-ui-spice-appUpgrade qemu-block-rbdUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-gpuUpgrade xen-libsUpgrade qemu-block-sshUpgrade qemu-skibootUpgrade qemu-ipxeUpgrade xen-doc-htmlUpgrade qemu-armUpgrade qemu-chardev-spiceUpgrade xen-libs-32bitUpgrade qemu-block-dmgUpgrade xen-kmp-defaultUpgrade qemuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-sgabiosUpgrade xen-toolsUpgrade qemu-extraUpgrade qemu-linux-userUpgrade qemu-ui-spice-coreUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade xenUpgrade qemu-ui-gtkUpgrade xen-develUpgrade qemu-langUpgrade qemu-ui-cursesUpgrade qemu-s390Upgrade qemu-ppcUpgrade qemu-chardev-baumUpgrade qemu-toolsUpgrade qemu-kvmUpgrade qemu-testsuiteUpgrade xen-tools-domUUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-usb-redirectUpgrade xen-kmp-paeUpgrade qemu-microvmUpgrade qemu-seabiosUpgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-ksmUpgrade qemu-vgabiosUpgrade qemu-guest-agentUpgrade qemu-block-glusterUpgrade qemu-block-curl | Nov 27, 2018 | Oct 16, 2018 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-x86 | Nov 30, 2018 | Oct 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub