Qemu has a Buffer Overflow in pcnet_receive in hw/net/pcnet.c because an incorrect integer data type is used.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-guest-agentUpgrade qemu-kvm | Sep 27, 2019 | Oct 9, 2018 |
| Debian | — | Upgrade qemu | Nov 12, 2018 | Oct 9, 2018 |
| Oracle_linux | — | Upgrade qemu-commonUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-imgUpgrade qemu-system-aarch64Upgrade qemu-block-glusterUpgrade qemu-kvm-coreUpgrade qemu-kvm-toolsUpgrade qemu-system-x86Upgrade qemu-system-aarch64-coreUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade qemu-guest-agentUpgrade ivshmem-toolsUpgrade qemu-system-x86-core | Oct 30, 2018 | Sep 26, 2018 |
| Redhat_linux | — | Upgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-tools | Sep 25, 2019 | Oct 9, 2018 |
| Suse | — | Upgrade qemu-ui-spice-coreUpgrade qemu-armUpgrade qemu-chardev-spiceUpgrade qemu-ksmUpgrade qemu-audio-paUpgrade xen-kmp-paeUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-alsaUpgrade qemu-ui-cursesUpgrade qemu-audio-ossUpgrade qemu-langUpgrade qemu-ui-openglUpgrade qemu-skibootUpgrade qemu-seabiosUpgrade qemu-ipxeUpgrade qemu-testsuiteUpgrade qemu-linux-userUpgrade qemu-hw-display-qxlUpgrade qemu-ui-spice-appUpgrade xen-libsUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-glusterUpgrade qemu-block-dmgUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-develUpgrade qemu-block-iscsiUpgrade xen-kmp-defaultUpgrade qemu-vgabiosUpgrade qemu-block-rbdUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade qemu-x86Upgrade qemu-block-curlUpgrade xenUpgrade qemu-s390Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-spiceUpgrade qemu-hw-usb-redirectUpgrade qemu-ppcUpgrade xen-toolsUpgrade kvmUpgrade qemu-chardev-baumUpgrade qemu-ui-gtkUpgrade qemu-kvmUpgrade qemu-extraUpgrade xen-libs-32bitUpgrade xen-tools-domUUpgrade xen-doc-htmlUpgrade qemu-guest-agentUpgrade qemu-s390xUpgrade qemu-microvmUpgrade qemu | Nov 27, 2018 | Oct 9, 2018 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system | Nov 30, 2018 | Oct 9, 2018 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub