Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-guest-agentUpgrade qemu-kvm-debuginfoUpgrade qemu-img | Sep 27, 2019 | Oct 9, 2018 |
| Debian | — | Upgrade qemu | Nov 12, 2018 | Oct 9, 2018 |
| Oracle_linux | — | Upgrade qemuUpgrade qemu-block-rbdUpgrade qemu-block-glusterUpgrade qemu-system-aarch64Upgrade qemu-kvm-toolsUpgrade qemu-commonUpgrade qemu-imgUpgrade qemu-kvm-coreUpgrade qemu-system-x86Upgrade ivshmem-toolsUpgrade qemu-system-aarch64-coreUpgrade qemu-block-iscsiUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-system-x86-core | Oct 30, 2018 | Sep 26, 2018 |
| Redhat_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfo | Sep 25, 2019 | Oct 9, 2018 |
| Suse | — | Upgrade qemuUpgrade qemu-chardev-baumUpgrade qemu-guest-agentUpgrade qemu-microvmUpgrade qemu-ppcUpgrade qemu-block-curlUpgrade qemu-audio-spiceUpgrade qemu-sgabiosUpgrade xen-kmp-defaultUpgrade qemu-s390xUpgrade qemu-extraUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-vgabiosUpgrade qemu-ui-gtkUpgrade qemu-hw-usb-redirectUpgrade qemu-x86Upgrade xenUpgrade kvmUpgrade xen-toolsUpgrade qemu-block-rbdUpgrade xen-libs-32bitUpgrade qemu-s390Upgrade xen-tools-domUUpgrade qemu-toolsUpgrade qemu-kvmUpgrade xen-doc-htmlUpgrade qemu-audio-ossUpgrade qemu-langUpgrade qemu-seabiosUpgrade qemu-ipxeUpgrade qemu-audio-alsaUpgrade qemu-block-dmgUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-sshUpgrade xen-develUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpuUpgrade xen-libsUpgrade qemu-hw-display-qxlUpgrade qemu-ui-spice-appUpgrade qemu-skibootUpgrade qemu-testsuiteUpgrade qemu-ui-openglUpgrade qemu-ksmUpgrade qemu-audio-paUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-spice-coreUpgrade qemu-armUpgrade xen-kmp-paeUpgrade qemu-block-iscsiUpgrade qemu-block-glusterUpgrade qemu-linux-user | Nov 27, 2018 | Oct 9, 2018 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-x86 | Nov 30, 2018 | Oct 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub