hw/rdma/vmw/pvrdma_cmd.c in QEMU allows attackers to cause a denial of service (NULL pointer dereference or excessive memory allocation) in create_cq_ring or create_qp_rings.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 20, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Aug 31, 2020 | Dec 20, 2018 |
| Oracle_linux | — | Upgrade qemu-kvmUpgrade qemu-system-x86-coreUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-commonUpgrade ivshmem-toolsUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemu-kvm-coreUpgrade qemu-block-iscsiUpgrade qemu-block-gluster | May 15, 2019 | Dec 11, 2018 |
| Suse | — | Upgrade qemu-ipxeUpgrade qemu-sgabiosUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-x86Upgrade qemu-hw-display-qxlUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ppcUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-rbdUpgrade qemu-armUpgrade qemuUpgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-toolsUpgrade qemu-s390xUpgrade qemu-guest-agentUpgrade qemu-ui-gtkUpgrade qemu-ksmUpgrade qemu-block-sshUpgrade qemu-hw-usb-redirectUpgrade qemu-s390Upgrade qemu-skibootUpgrade qemu-audio-spiceUpgrade qemu-vgabiosUpgrade qemu-microvmUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-langUpgrade qemu-ui-spice-coreUpgrade qemu-kvmUpgrade qemu-ui-cursesUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-appUpgrade qemu-block-iscsiUpgrade qemu-seabios | Feb 4, 2022 | Dec 20, 2018 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-system-guiUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-dataUpgrade qemu-system-arm | Apr 3, 2019 | Dec 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub