The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 6, 2018 |
| Oracle_linux | — | Upgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade qemu-block-glusterUpgrade qemu-commonUpgrade qemuUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64Upgrade qemu-kvm-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-kvmUpgrade qemu-img | Jul 21, 2020 | Oct 18, 2018 |
| Suse | — | Upgrade xen-toolsUpgrade xen-kmp-paeUpgrade xen-develUpgrade xen-tools-domUUpgrade xenUpgrade xen-libs-32bitUpgrade xen-kmp-defaultUpgrade xen-doc-htmlUpgrade xen-libs | Jan 4, 2019 | Dec 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub