The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.
CVSS Details
- CVSS 3.1 Base Score: 5.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 6, 2018 |
| Oracle_linux | — | Upgrade qemu-system-aarch64-coreUpgrade qemu-imgUpgrade qemu-system-aarch64Upgrade qemu-kvm-coreUpgrade qemu-kvmUpgrade qemu-block-glusterUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemu-commonUpgrade ivshmem-tools | Jul 21, 2020 | Oct 18, 2018 |
| Suse | — | Upgrade xen-develUpgrade xen-kmp-paeUpgrade xen-toolsUpgrade xen-libsUpgrade xen-doc-htmlUpgrade xen-tools-domUUpgrade xen-kmp-defaultUpgrade xenUpgrade xen-libs-32bit | Jan 4, 2019 | Dec 6, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub