qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possibly have unspecified other impact.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvm-tools-maUpgrade qemu-kvm-ma-debuginfoUpgrade qemu-img-maUpgrade qemu-kvm-maUpgrade qemu-kvm-common-ma | Aug 28, 2019 | Oct 9, 2018 |
| Debian | — | Upgrade qemu | Nov 12, 2018 | Oct 9, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 4, 2019 | Oct 9, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Apr 16, 2020 | Oct 9, 2018 |
| Oracle_linux | — | Upgrade qemu-kvmUpgrade qemu-system-x86-coreUpgrade qemu-block-iscsiUpgrade qemu-commonUpgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-system-x86Upgrade qemu-imgUpgrade qemu-system-aarch64Upgrade qemu-system-aarch64-coreUpgrade qemu-kvm-coreUpgrade qemu-block-gluster | Oct 30, 2018 | May 21, 2018 |
| Redhat_linux | — | No solution existsUpgrade qemu-kvm-ma-debuginfoUpgrade qemu-kvm-tools-maUpgrade qemu-kvm-common-maUpgrade qemu-img-maUpgrade qemu-kvm-ma | Aug 7, 2019 | Oct 9, 2018 |
| Suse | — | Upgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade xen-toolsUpgrade xen-develUpgrade qemu-sgabiosUpgrade kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-spice-appUpgrade qemu-s390xUpgrade qemu-audio-paUpgrade qemu-armUpgrade xen-tools-domuUpgrade qemu-ui-openglUpgrade qemu-toolsUpgrade qemu-audio-ossUpgrade qemu-ui-spice-coreUpgrade qemu-ppcUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-linux-userUpgrade qemu-block-sshUpgrade qemu-microvmUpgrade qemu-block-glusterUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-spiceUpgrade qemu-kvmUpgrade qemu-ksmUpgrade qemu-vgabiosUpgrade xen-kmp-defaultUpgrade xen-libs-32bitUpgrade qemu-x86Upgrade xen-kmp-paeUpgrade qemu-chardev-spiceUpgrade qemu-block-iscsiUpgrade qemu-s390Upgrade xen-libsUpgrade qemu-extraUpgrade qemu-ui-cursesUpgrade qemu-ipxeUpgrade qemu-skibootUpgrade xen-doc-htmlUpgrade qemu-seabiosUpgrade xenUpgrade qemu-audio-alsaUpgrade qemu-testsuiteUpgrade qemu-ui-gtkUpgrade qemu-block-dmgUpgrade qemu-chardev-baumUpgrade qemu-block-curl | Oct 24, 2018 | Oct 9, 2018 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-sparc | Nov 30, 2018 | Oct 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub