qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name (obtained from bridge.conf or a --br=bridge option) is limited to the IFNAMSIZ size, which can lead to an ACL bypass.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Aug 26, 2019 | Jul 3, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Mar 31, 2020 | Jul 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Aug 31, 2020 | Jul 3, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2019 |
| Suse | — | Upgrade qemu-ksmUpgrade qemu-kvmUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-coreUpgrade qemu-guest-agentUpgrade qemu-audio-paUpgrade qemu-block-dmgUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-curlUpgrade qemu-ui-cursesUpgrade qemu-linux-userUpgrade qemu-testsuiteUpgrade qemu-ppcUpgrade qemu-sgabiosUpgrade qemu-microvmUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemu-toolsUpgrade qemu-x86Upgrade qemu-chardev-baumUpgrade qemu-block-glusterUpgrade qemu-s390Upgrade qemu-audio-alsaUpgrade qemu-vgabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-seabiosUpgrade qemu-skibootUpgrade qemu-audio-sdlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-sdlUpgrade qemu-langUpgrade qemuUpgrade qemu-armUpgrade qemu-block-sshUpgrade qemu-block-nfsUpgrade qemu-ui-spice-appUpgrade qemu-chardev-spiceUpgrade qemu-audio-spiceUpgrade qemu-ipxeUpgrade qemu-hw-display-qxlUpgrade qemu-block-rbdUpgrade kvmUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-openglUpgrade qemu-s390xUpgrade qemu-extraUpgrade qemu-hw-s390x-virtio-gpu-ccw | Aug 22, 2019 | Jul 3, 2019 |
| Ubuntu | — | Upgrade qemu-utilsUpgrade qemu-commonUpgrade qemuUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-system-commonUpgrade qemu-user-staticUpgrade qemu-system-gui | Nov 14, 2019 | Jul 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub