qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name (obtained from bridge.conf or a --br=bridge option) is limited to the IFNAMSIZ size, which can lead to an ACL bypass.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Aug 26, 2019 | Jul 3, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Mar 31, 2020 | Jul 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Aug 31, 2020 | Jul 3, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2019 |
| Suse | — | Upgrade qemu-armUpgrade qemu-ui-openglUpgrade qemu-audio-spiceUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-rbdUpgrade qemu-block-nfsUpgrade qemu-audio-sdlUpgrade qemu-chardev-spiceUpgrade qemu-ipxeUpgrade qemu-extraUpgrade qemu-langUpgrade qemu-skibootUpgrade qemuUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-vgaUpgrade kvmUpgrade qemu-hw-display-qxlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390xUpgrade qemu-ui-sdlUpgrade qemu-block-curlUpgrade qemu-toolsUpgrade qemu-testsuiteUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-s390Upgrade qemu-hw-usb-redirectUpgrade qemu-guest-agentUpgrade qemu-ksmUpgrade qemu-ui-gtkUpgrade qemu-kvmUpgrade qemu-audio-alsaUpgrade qemu-block-dmgUpgrade qemu-audio-paUpgrade qemu-block-iscsiUpgrade qemu-microvmUpgrade qemu-ui-spice-coreUpgrade qemu-vgabiosUpgrade qemu-seabiosUpgrade qemu-block-glusterUpgrade qemu-chardev-baumUpgrade qemu-audio-ossUpgrade qemu-x86Upgrade qemu-ppcUpgrade qemu-ui-cursesUpgrade qemu-linux-userUpgrade qemu-sgabios | Aug 22, 2019 | Jul 3, 2019 |
| Ubuntu | — | Upgrade qemu-utilsUpgrade qemu-commonUpgrade qemu-kvmUpgrade qemuUpgrade qemu-system-x86Upgrade qemu-system-commonUpgrade qemu-system-guiUpgrade qemu-user-static | Nov 14, 2019 | Jul 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub