Quick Emulator (aka QEMU), when built with the Cirrus CLGD 54xx VGA Emulator support, allows local guest OS privileged users to cause a denial of service (out-of-bounds access and QEMU process crash) by leveraging incorrect region calculation when updating VGA display.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-imgUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-kvm | Apr 27, 2020 | Mar 12, 2018 |
| Amazon_linux | — | Upgrade qemu-kvm | Jun 12, 2018 | Mar 12, 2018 |
| Centos_linux | — | Upgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-kvm-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm-tools | Jun 1, 2018 | Mar 12, 2018 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Mar 12, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade qemu-img | May 29, 2018 | Mar 12, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | May 29, 2018 | Mar 12, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Jul 3, 2018 | Mar 12, 2018 |
| Oracle_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86Upgrade qemu-kvm-toolsUpgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-block-rbdUpgrade qemu-commonUpgrade ivshmem-toolsUpgrade qemu-system-x86-coreUpgrade qemu-block-iscsiUpgrade qemuUpgrade qemu-block-glusterUpgrade qemu-guest-agent | May 15, 2018 | Mar 8, 2018 |
| Redhat_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-kvm-debuginfoNo solution existsUpgrade qemu-imgUpgrade qemu-guest-agent | May 15, 2018 | Mar 12, 2018 |
| Suse | — | Upgrade qemu-hw-display-qxlUpgrade qemu-chardev-spiceUpgrade qemu-kvmUpgrade qemu-chardev-baumUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-microvmUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-s390xUpgrade qemu-s390Upgrade qemu-audio-spiceUpgrade qemu-block-sshUpgrade qemu-toolsUpgrade qemu-guest-agentUpgrade qemu-x86Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-vgabiosUpgrade qemu-ppcUpgrade qemu-ipxeUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-langUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-spice-appUpgrade qemu-block-iscsiUpgrade qemu-ksmUpgrade qemu-audio-ossUpgrade qemu-seabiosUpgrade qemu-skibootUpgrade qemu-ui-cursesUpgrade qemu-audio-paUpgrade qemu-ui-spice-coreUpgrade qemu-armUpgrade qemu-ui-openglUpgrade qemu-block-curl | May 20, 2018 | Mar 12, 2018 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-aarch64 | May 23, 2018 | Mar 12, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub