Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfo | Sep 27, 2019 | Oct 16, 2018 |
| Debian | — | Upgrade qemu | Nov 12, 2018 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 4, 2019 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Nov 19, 2019 | Oct 16, 2018 |
| Oracle_linux | — | Upgrade qemu-system-x86Upgrade qemu-system-x86-coreUpgrade qemu-system-aarch64Upgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm-coreUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-kvmUpgrade qemu-block-glusterUpgrade ivshmem-toolsUpgrade qemuUpgrade qemu-commonUpgrade qemu-block-rbdUpgrade qemu-guest-agent | Oct 30, 2018 | Sep 26, 2018 |
| Redhat_linux | — | No solution existsUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-img | Sep 25, 2019 | Oct 16, 2018 |
| Suse | — | Upgrade qemu-sgabiosUpgrade xen-toolsUpgrade qemu-extraUpgrade xen-kmp-defaultUpgrade qemu-armUpgrade qemuUpgrade qemu-ipxeUpgrade qemu-audio-spiceUpgrade qemu-block-dmgUpgrade xen-libsUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-chardev-spiceUpgrade xen-doc-htmlUpgrade kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-libs-32bitUpgrade qemu-hw-display-qxlUpgrade qemu-block-rbdUpgrade qemu-skibootUpgrade qemu-ui-openglUpgrade qemu-block-sshUpgrade qemu-testsuiteUpgrade qemu-ksmUpgrade qemu-ui-cursesUpgrade xenUpgrade qemu-guest-agentUpgrade qemu-ui-gtkUpgrade qemu-linux-userUpgrade qemu-kvmUpgrade xen-develUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-seabiosUpgrade qemu-audio-alsaUpgrade qemu-ui-spice-coreUpgrade qemu-s390Upgrade qemu-toolsUpgrade qemu-chardev-baumUpgrade qemu-microvmUpgrade xen-kmp-paeUpgrade qemu-audio-ossUpgrade qemu-ppcUpgrade qemu-hw-usb-redirectUpgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-block-glusterUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade xen-tools-domuUpgrade qemu-lang | Nov 27, 2018 | Oct 16, 2018 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-arm | Nov 30, 2018 | Oct 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub