qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possibly have unspecified other impact.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvm-tools-maUpgrade qemu-kvm-maUpgrade qemu-kvm-common-maUpgrade qemu-img-maUpgrade qemu-kvm-ma-debuginfo | Aug 28, 2019 | Oct 9, 2018 |
| Debian | — | Upgrade qemu | Nov 12, 2018 | Oct 9, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Oct 9, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Apr 16, 2020 | Oct 9, 2018 |
| Oracle_linux | — | Upgrade qemu-system-x86-coreUpgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemuUpgrade ivshmem-toolsUpgrade qemu-kvmUpgrade qemu-commonUpgrade qemu-imgUpgrade qemu-block-glusterUpgrade qemu-system-aarch64-coreUpgrade qemu-kvm-coreUpgrade qemu-system-x86Upgrade qemu-system-aarch64 | Oct 30, 2018 | May 21, 2018 |
| Redhat_linux | — | Upgrade qemu-kvm-maUpgrade qemu-kvm-common-maUpgrade qemu-img-maUpgrade qemu-kvm-ma-debuginfoUpgrade qemu-kvm-tools-maNo solution exists | Aug 7, 2019 | Oct 9, 2018 |
| Suse | — | Upgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ppcUpgrade xen-tools-domuUpgrade qemu-armUpgrade kvmUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-spice-coreUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemuUpgrade xen-develUpgrade qemu-toolsUpgrade qemu-sgabiosUpgrade qemu-audio-paUpgrade qemu-s390xUpgrade qemu-block-sshUpgrade xen-toolsUpgrade qemu-hw-display-qxlUpgrade qemu-block-glusterUpgrade qemu-linux-userUpgrade qemu-microvmUpgrade qemu-guest-agentUpgrade qemu-ui-openglUpgrade qemu-langUpgrade qemu-chardev-spiceUpgrade xenUpgrade qemu-seabiosUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade qemu-kvmUpgrade qemu-block-rbdUpgrade xen-doc-htmlUpgrade qemu-block-curlUpgrade qemu-block-dmgUpgrade qemu-ui-gtkUpgrade qemu-ipxeUpgrade qemu-skibootUpgrade qemu-block-iscsiUpgrade qemu-s390Upgrade qemu-audio-alsaUpgrade xen-kmp-paeUpgrade qemu-testsuiteUpgrade xen-libs-32bitUpgrade xen-kmp-defaultUpgrade qemu-chardev-baumUpgrade qemu-ui-cursesUpgrade qemu-audio-spiceUpgrade xen-libsUpgrade qemu-extraUpgrade qemu-ksm | Oct 24, 2018 | Oct 9, 2018 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system | Nov 30, 2018 | Oct 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub