QEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked (and -1 is mishandled).
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 20, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Aug 31, 2020 | Dec 20, 2018 |
| Oracle_linux | — | Upgrade qemu-system-aarch64Upgrade qemu-kvm-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-block-rbdUpgrade qemu-imgUpgrade qemu-system-x86-coreUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade qemu-commonUpgrade qemu-system-x86Upgrade qemu-block-glusterUpgrade ivshmem-toolsUpgrade qemu | May 15, 2019 | Dec 11, 2018 |
| Suse | — | Upgrade qemu-skibootUpgrade qemu-audio-paUpgrade qemu-ui-spice-coreUpgrade qemu-block-curlUpgrade qemu-ppcUpgrade qemu-s390Upgrade qemu-chardev-baumUpgrade qemu-block-rbdUpgrade qemu-seabiosUpgrade qemu-kvmUpgrade qemu-hw-usb-redirectUpgrade qemu-block-iscsiUpgrade qemu-microvmUpgrade qemu-audio-alsaUpgrade qemu-langUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-appUpgrade qemu-s390xUpgrade qemu-guest-agentUpgrade qemu-block-sshUpgrade qemu-ksmUpgrade qemu-chardev-spiceUpgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-x86Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-toolsUpgrade qemu-ui-openglUpgrade qemu-sgabiosUpgrade qemu-armUpgrade qemu-vgabiosUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade qemu-audio-ossUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ipxe | Feb 4, 2022 | Dec 20, 2018 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-dataUpgrade qemu-system-ppcUpgrade qemu-system-guiUpgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-s390x | Apr 3, 2019 | Dec 20, 2018 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub