qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name (obtained from bridge.conf or a --br=bridge option) is limited to the IFNAMSIZ size, which can lead to an ACL bypass.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Aug 26, 2019 | Jul 3, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Mar 31, 2020 | Jul 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Aug 31, 2020 | Jul 3, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2019 |
| Suse | — | Upgrade qemu-audio-paUpgrade qemu-ksmUpgrade qemu-block-iscsiUpgrade qemu-kvmUpgrade qemu-seabiosUpgrade qemu-chardev-baumUpgrade qemu-block-dmgUpgrade qemu-ui-gtkUpgrade qemu-microvmUpgrade qemu-ui-spice-coreUpgrade qemu-s390Upgrade qemu-block-curlUpgrade qemu-block-glusterUpgrade qemu-ui-cursesUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-vgabiosUpgrade qemu-toolsUpgrade qemu-guest-agentUpgrade qemu-ppcUpgrade qemu-linux-userUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-alsaUpgrade qemu-sgabiosUpgrade qemu-testsuiteUpgrade qemu-x86Upgrade qemu-armUpgrade qemu-block-sshUpgrade qemu-audio-sdlUpgrade kvmUpgrade qemu-ui-sdlUpgrade qemu-langUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-extraUpgrade qemuUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-qxlUpgrade qemu-chardev-spiceUpgrade qemu-audio-spiceUpgrade qemu-ui-openglUpgrade qemu-s390xUpgrade qemu-ipxeUpgrade qemu-block-rbdUpgrade qemu-block-nfsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-skiboot | Aug 22, 2019 | Jul 3, 2019 |
| Ubuntu | — | Upgrade qemuUpgrade qemu-kvmUpgrade qemu-commonUpgrade qemu-utilsUpgrade qemu-system-guiUpgrade qemu-system-commonUpgrade qemu-user-staticUpgrade qemu-system-x86 | Nov 14, 2019 | Jul 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub