m_cat in slirp/mbuf.c in Qemu has a heap-based buffer overflow via incoming fragmented datagrams.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm | Apr 27, 2020 | Jun 13, 2018 |
| Amazon_linux | — | Upgrade qemu-kvm | Sep 7, 2018 | Jun 13, 2018 |
| Centos_linux | — | Upgrade qemu-kvm-tools-maUpgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfoUpgrade qemu-img-maUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvm-ma-debuginfoUpgrade qemu-kvm-common-maUpgrade qemu-kvm-ma | Aug 22, 2018 | Jun 13, 2018 |
| Debian | — | Upgrade qemu | May 10, 2019 | Jun 13, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Sep 27, 2018 | Jun 13, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Sep 27, 2018 | Jun 13, 2018 |
| Oracle_linux | — | Upgrade qemu-block-rbdUpgrade qemu-commonUpgrade qemu-block-glusterUpgrade qemu-system-x86-coreUpgrade qemu-guest-agentUpgrade ivshmem-toolsUpgrade qemu-kvmUpgrade qemuUpgrade qemu-system-aarch64Upgrade qemu-kvm-toolsUpgrade qemu-block-iscsiUpgrade qemu-kvm-commonUpgrade qemu-system-x86Upgrade qemu-system-aarch64-coreUpgrade qemu-kvm-coreUpgrade qemu-img | Aug 17, 2018 | Jun 5, 2018 |
| Redhat_linux | — | Upgrade qemu-kvm-ma-debuginfoUpgrade qemu-guest-agentUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-maUpgrade qemu-kvm-toolsNo solution existsUpgrade qemu-kvm-common-maUpgrade qemu-kvm-tools-maUpgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfoUpgrade qemu-img-ma | Aug 17, 2018 | Jun 13, 2018 |
| Suse | — | Upgrade qemu-block-iscsiUpgrade qemu-ksmUpgrade qemu-block-curlUpgrade qemu-ui-cursesUpgrade qemu-langUpgrade qemu-armUpgrade qemu-ipxeUpgrade qemu-ui-spice-appUpgrade qemu-ui-openglUpgrade qemu-seabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-linux-userUpgrade qemu-chardev-spiceUpgrade xen-kmp-paeUpgrade qemu-audio-ossUpgrade qemu-audio-paUpgrade qemu-audio-alsaUpgrade qemu-hw-display-virtio-vgaUpgrade xen-libsUpgrade qemu-block-dmgUpgrade xen-kmp-defaultUpgrade qemu-block-sshUpgrade qemu-skibootUpgrade qemu-s390Upgrade qemu-testsuiteUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-coreUpgrade qemu-extraUpgrade xen-tools-domUUpgrade qemu-toolsUpgrade qemu-audio-spiceUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-toolsUpgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemuUpgrade qemu-sgabiosUpgrade xen-develUpgrade qemu-block-glusterUpgrade qemu-microvmUpgrade qemu-ppcUpgrade xenUpgrade xen-doc-htmlUpgrade kvmUpgrade qemu-x86Upgrade qemu-s390xUpgrade qemu-kvmUpgrade xen-libs-32bitUpgrade qemu-hw-display-qxlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-chardev-baumUpgrade qemu-guest-agentUpgrade xen-doc-pdf | Jul 24, 2018 | Jun 13, 2018 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-ppc | Nov 30, 2018 | Jun 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub