Qemu emulator <= 3.0.0 built with the NE2000 NIC emulation support is vulnerable to an integer overflow, which could lead to buffer overflow issue. It could occur when receiving packets over the network. A user inside guest could use this flaw to crash the Qemu process resulting in DoS.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfo | Sep 27, 2019 | Oct 16, 2018 |
| Debian | — | Upgrade qemu | Nov 12, 2018 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Dec 4, 2019 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Oct 16, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Nov 19, 2019 | Oct 16, 2018 |
| Oracle_linux | — | Upgrade qemu-block-rbdUpgrade qemuUpgrade qemu-block-glusterUpgrade ivshmem-toolsUpgrade qemu-commonUpgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64Upgrade qemu-block-iscsiUpgrade qemu-system-x86-coreUpgrade qemu-system-x86Upgrade qemu-system-aarch64-coreUpgrade qemu-kvmUpgrade qemu-img | Oct 30, 2018 | Sep 26, 2018 |
| Redhat_linux | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade qemu-guest-agentNo solution exists | Sep 25, 2019 | Oct 16, 2018 |
| Suse | — | Upgrade xen-libs-32bitUpgrade qemu-extraUpgrade qemu-armUpgrade xen-kmp-defaultUpgrade qemu-audio-spiceUpgrade qemuUpgrade qemu-block-dmgUpgrade xen-toolsUpgrade xen-doc-htmlUpgrade qemu-sgabiosUpgrade qemu-ui-spice-appUpgrade qemu-s390xUpgrade xen-libsUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ipxeUpgrade qemu-ui-openglUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-chardev-spiceUpgrade kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-skibootUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-seabiosUpgrade qemu-ui-gtkUpgrade qemu-audio-alsaUpgrade xenUpgrade qemu-block-glusterUpgrade qemu-ksmUpgrade xen-tools-domuUpgrade qemu-langUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-ossUpgrade qemu-block-curlUpgrade qemu-block-iscsiUpgrade qemu-kvmUpgrade qemu-audio-paUpgrade xen-develUpgrade qemu-ui-cursesUpgrade qemu-vgabiosUpgrade qemu-ppcUpgrade qemu-hw-usb-redirectUpgrade xen-kmp-paeUpgrade qemu-toolsUpgrade qemu-x86Upgrade qemu-ui-spice-coreUpgrade qemu-chardev-baumUpgrade qemu-linux-userUpgrade qemu-testsuiteUpgrade qemu-microvmUpgrade qemu-s390 | Nov 27, 2018 | Oct 16, 2018 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-arm | Nov 30, 2018 | Oct 16, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub