The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 6, 2018 |
| Oracle_linux | — | Upgrade qemu-commonUpgrade qemu-block-iscsiUpgrade qemuUpgrade qemu-block-rbdUpgrade ivshmem-toolsUpgrade qemu-block-glusterUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64-core | Jul 21, 2020 | Oct 18, 2018 |
| Suse | — | Upgrade xen-doc-htmlUpgrade xen-libsUpgrade xen-kmp-defaultUpgrade xen-libs-32bitUpgrade xenUpgrade xen-toolsUpgrade xen-tools-domuUpgrade xen-develUpgrade xen-kmp-pae | Jan 4, 2019 | Dec 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
