The pnv_lpc_do_eccb function in hw/ppc/pnv_lpc.c in Qemu before 3.1 allows out-of-bounds write or read access to PowerNV memory.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | May 31, 2019 | Nov 15, 2018 |
| Suse | — | Upgrade qemu-langUpgrade qemu-s390Upgrade qemu-ksmUpgrade qemu-block-glusterUpgrade qemu-kvmUpgrade qemu-seabiosUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-ppcUpgrade qemu-guest-agentUpgrade qemu-testsuiteUpgrade qemu-extraUpgrade qemu-block-sshUpgrade qemu-block-iscsiUpgrade qemu-linux-userUpgrade qemu-block-dmgUpgrade qemu-vgabiosUpgrade qemuUpgrade qemu-sgabiosUpgrade qemu-x86Upgrade qemu-toolsUpgrade qemu-ipxeUpgrade qemu-arm | Feb 20, 2019 | Nov 15, 2018 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-aarch64 | Nov 30, 2018 | Nov 15, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub