The vga_draw_text function in Qemu allows local OS guest privileged users to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging improper memory address validation.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfoUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-tools | Apr 27, 2020 | Jan 23, 2018 |
| Amazon_linux | — | Upgrade qemu-kvm | Jun 12, 2018 | Jan 23, 2018 |
| Centos_linux | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-tools | Jul 17, 2018 | Jan 23, 2018 |
| Debian | — | Upgrade qemu | May 31, 2018 | Jan 23, 2018 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Apr 9, 2018 | Jan 23, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | May 29, 2018 | Jan 23, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | May 3, 2018 | Jan 23, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Jul 3, 2018 | Jan 23, 2018 |
| Oracle_linux | — | Upgrade qemu-system-aarch64Upgrade qemu-block-glusterUpgrade qemu-commonUpgrade qemu-system-x86-coreUpgrade qemu-kvm-toolsUpgrade qemuUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade ivshmem-toolsUpgrade qemu-block-iscsiUpgrade qemu-system-x86Upgrade qemu-system-aarch64-coreUpgrade qemu-block-rbdUpgrade qemu-kvm-common | Apr 19, 2018 | Dec 25, 2017 |
| Redhat_linux | — | Upgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvm-debuginfoNo solution existsUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-tools | Apr 11, 2018 | Jan 23, 2018 |
| Suse | — | Upgrade qemu-seabiosUpgrade qemu-armUpgrade xen-develUpgrade xen-libsUpgrade qemuUpgrade qemu-block-iscsiUpgrade xen-doc-htmlUpgrade xen-kmp-paeUpgrade qemu-s390Upgrade qemu-ipxeUpgrade qemu-vgabiosUpgrade qemu-guest-agentUpgrade qemu-toolsUpgrade qemu-block-curlUpgrade kvmUpgrade xen-toolsUpgrade qemu-sgabiosUpgrade qemu-kvmUpgrade xen-kmp-defaultUpgrade qemu-block-sshUpgrade xen-libs-32bitUpgrade qemu-langUpgrade qemu-x86Upgrade xen-tools-domUUpgrade xen-doc-pdfUpgrade qemu-block-rbdUpgrade qemu-ppcUpgrade xen | Feb 15, 2018 | Jan 23, 2018 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-ppc | Feb 21, 2018 | Jan 23, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub