hw/rdma/rdma_backend.c in QEMU allows guest OS users to trigger out-of-bounds access via a PvrdmaSqWqe ring element with a large num_sge value.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 20, 2018 |
| Oracle_linux | — | Upgrade qemu-block-glusterUpgrade qemu-system-aarch64-coreUpgrade ivshmem-toolsUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-block-rbdUpgrade qemu-kvm-coreUpgrade qemu-block-iscsiUpgrade qemu-system-x86-coreUpgrade qemu-imgUpgrade qemu-commonUpgrade qemu-system-aarch64Upgrade qemu | May 15, 2019 | Dec 11, 2018 |
| Suse | — | Upgrade qemu-chardev-baumUpgrade qemu-ui-cursesUpgrade qemu-block-iscsiUpgrade qemu-kvmUpgrade qemu-s390xUpgrade qemu-ksmUpgrade qemu-block-sshUpgrade qemu-skibootUpgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-seabiosUpgrade qemu-s390Upgrade qemu-audio-spiceUpgrade qemu-audio-alsaUpgrade qemu-langUpgrade qemu-ui-spice-coreUpgrade qemu-ui-spice-appUpgrade qemu-microvmUpgrade qemu-vgabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-ossUpgrade qemu-x86Upgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-rbdUpgrade qemu-sgabiosUpgrade qemu-ppcUpgrade qemu-ipxeUpgrade qemu-audio-paUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-toolsUpgrade qemuUpgrade qemu-chardev-spiceUpgrade qemu-guest-agentUpgrade qemu-armUpgrade qemu-ui-opengl | Feb 4, 2022 | Dec 20, 2018 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-dataUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-guiUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-s390x | Apr 3, 2019 | Dec 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub