hw/rdma/rdma_backend.c in QEMU allows guest OS users to trigger out-of-bounds access via a PvrdmaSqWqe ring element with a large num_sge value.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 20, 2018 |
| Oracle_linux | — | Upgrade qemu-system-x86Upgrade qemu-kvmUpgrade ivshmem-toolsUpgrade qemu-block-glusterUpgrade qemu-system-aarch64-coreUpgrade qemu-commonUpgrade qemu-imgUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64Upgrade qemu-block-rbdUpgrade qemu-system-x86-coreUpgrade qemuUpgrade qemu-block-iscsi | May 15, 2019 | Dec 11, 2018 |
| Suse | — | Upgrade qemu-kvmUpgrade qemu-audio-spiceUpgrade qemu-langUpgrade qemu-skibootUpgrade qemu-ksmUpgrade qemu-vgabiosUpgrade qemu-ui-cursesUpgrade qemu-s390Upgrade qemu-ui-gtkUpgrade qemu-ui-spice-coreUpgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-hw-usb-redirectUpgrade qemu-block-sshUpgrade qemu-s390xUpgrade qemu-ui-spice-appUpgrade qemu-chardev-baumUpgrade qemu-microvmUpgrade qemu-seabiosUpgrade qemu-block-rbdUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-paUpgrade qemu-armUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-chardev-spiceUpgrade qemu-guest-agentUpgrade qemu-toolsUpgrade qemu-audio-ossUpgrade qemu-ui-openglUpgrade qemu-x86Upgrade qemu-hw-display-virtio-vgaUpgrade qemuUpgrade qemu-ipxeUpgrade qemu-hw-display-qxlUpgrade qemu-sgabiosUpgrade qemu-ppc | Feb 4, 2022 | Dec 20, 2018 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-guiUpgrade qemu-system-x86Upgrade qemu-system-dataUpgrade qemu-system-armUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-s390x | Apr 3, 2019 | Dec 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub