The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 6, 2018 |
| Oracle_linux | — | Upgrade qemu-system-aarch64-coreUpgrade qemu-system-aarch64Upgrade qemu-kvm-coreUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade qemuUpgrade qemu-commonUpgrade qemu-block-rbdUpgrade ivshmem-toolsUpgrade qemu-block-gluster | Jul 21, 2020 | Oct 18, 2018 |
| Suse | — | Upgrade xen-doc-htmlUpgrade xen-libsUpgrade xen-libs-32bitUpgrade xen-kmp-defaultUpgrade xenUpgrade xen-toolsUpgrade xen-tools-domuUpgrade xen-kmp-paeUpgrade xen-devel | Jan 4, 2019 | Dec 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
