hw/rdma/vmw/pvrdma_main.c in QEMU does not implement a read operation (such as uar_read by analogy to uar_write), which allows attackers to cause a denial of service (NULL pointer dereference).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 20, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-audio-alsaUpgrade qemu-kvmUpgrade qemu-ui-cursesUpgrade qemu-system-aarch64-coreUpgrade qemu-audio-paUpgrade qemu-block-curlUpgrade qemu-ui-gtkUpgrade qemu-block-sshUpgrade qemu-block-nfsUpgrade qemu-ui-sdlUpgrade qemu-block-rbdUpgrade qemu-system-aarch64Upgrade qemu-audio-sdlUpgrade qemu-imgUpgrade qemu-audio-ossUpgrade qemu-block-dmgUpgrade qemu-block-glusterUpgrade qemu-commonUpgrade qemu-block-iscsi | Aug 28, 2019 | Dec 20, 2018 |
| Oracle_linux | — | Upgrade qemu-system-x86-coreUpgrade qemu-block-iscsiUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-block-rbdUpgrade qemu-imgUpgrade qemu-commonUpgrade qemuUpgrade ivshmem-toolsUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-block-gluster | May 15, 2019 | Dec 11, 2018 |
| Suse | — | Upgrade qemu-ppcUpgrade qemu-chardev-baumUpgrade qemu-vgabiosUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-guest-agentUpgrade qemu-ui-spice-appUpgrade qemu-kvmUpgrade qemu-toolsUpgrade qemu-block-sshUpgrade qemu-ipxeUpgrade qemu-s390xUpgrade qemu-langUpgrade qemu-audio-spiceUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-sgabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-spice-coreUpgrade qemu-chardev-spiceUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-openglUpgrade qemu-audio-alsaUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-seabiosUpgrade qemu-block-iscsiUpgrade qemu-ksmUpgrade qemu-ui-cursesUpgrade qemu-s390Upgrade qemu-armUpgrade qemu-x86Upgrade qemu-audio-ossUpgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-skibootUpgrade qemu-microvm | Feb 4, 2022 | Dec 20, 2018 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-guiUpgrade qemu-system-dataUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system | Apr 3, 2019 | Dec 20, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub