Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds access and QEMU process crash) by leveraging incorrect region calculation when updating VGA display.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-img | Apr 27, 2020 | Mar 12, 2018 |
| Amazon_linux | — | Upgrade qemu-kvm | Jun 12, 2018 | Mar 12, 2018 |
| Centos_linux | — | Upgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-img | Jun 1, 2018 | Mar 12, 2018 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Mar 12, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | May 29, 2018 | Mar 12, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | May 29, 2018 | Mar 12, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Jul 3, 2018 | Mar 12, 2018 |
| Oracle_linux | — | Upgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-block-glusterUpgrade qemu-commonUpgrade qemu-kvm-commonUpgrade qemu-imgUpgrade ivshmem-toolsUpgrade qemu-system-aarch64-coreUpgrade qemu-system-aarch64Upgrade qemu-kvm-coreUpgrade qemu-system-x86-coreUpgrade qemu-kvm-toolsUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemuUpgrade qemu-block-iscsi | May 15, 2018 | Mar 8, 2018 |
| Redhat_linux | — | Upgrade qemu-guest-agentUpgrade qemu-imgNo solution existsUpgrade qemu-kvm-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-tools | May 15, 2018 | Mar 12, 2018 |
| Suse | — | Upgrade qemu-chardev-baumUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-microvmUpgrade qemu-guest-agentUpgrade qemu-block-sshUpgrade qemuUpgrade qemu-ipxeUpgrade qemu-chardev-spiceUpgrade qemu-s390xUpgrade qemu-block-rbdUpgrade qemu-langUpgrade qemu-kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ppcUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-spiceUpgrade qemu-vgabiosUpgrade qemu-toolsUpgrade qemu-s390Upgrade qemu-hw-display-qxlUpgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-ksmUpgrade qemu-block-iscsiUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-appUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-coreUpgrade qemu-block-curlUpgrade qemu-skibootUpgrade qemu-armUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-openglUpgrade qemu-audio-ossUpgrade qemu-seabios | May 20, 2018 | Mar 12, 2018 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-system-aarch64 | May 23, 2018 | Mar 12, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub