qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name (obtained from bridge.conf or a --br=bridge option) is limited to the IFNAMSIZ size, which can lead to an ACL bypass.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Aug 26, 2019 | Jul 3, 2019 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Mar 31, 2020 | Jul 3, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Aug 31, 2020 | Jul 3, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 3, 2019 |
| Suse | — | Upgrade qemu-linux-userUpgrade qemu-ppcUpgrade qemu-kvmUpgrade qemu-microvmUpgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-block-dmgUpgrade qemu-sgabiosUpgrade qemu-testsuiteUpgrade qemu-audio-ossUpgrade qemu-ui-spice-coreUpgrade qemu-vgabiosUpgrade qemu-guest-agentUpgrade qemu-block-curlUpgrade qemu-ui-gtkUpgrade qemu-audio-paUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-glusterUpgrade qemu-s390Upgrade qemu-seabiosUpgrade qemu-ui-cursesUpgrade qemu-x86Upgrade qemu-toolsUpgrade qemu-chardev-baumUpgrade qemu-ksmUpgrade kvmUpgrade qemu-hw-display-qxlUpgrade qemu-chardev-spiceUpgrade qemu-block-sshUpgrade qemu-block-nfsUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-rbdUpgrade qemu-skibootUpgrade qemu-ui-sdlUpgrade qemuUpgrade qemu-armUpgrade qemu-audio-spiceUpgrade qemu-s390xUpgrade qemu-langUpgrade qemu-audio-sdlUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ipxeUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-extraUpgrade qemu-ui-spice-app | Aug 22, 2019 | Jul 3, 2019 |
| Ubuntu | — | Upgrade qemu-system-commonUpgrade qemu-system-x86Upgrade qemu-user-staticUpgrade qemu-system-guiUpgrade qemu-utilsUpgrade qemu-kvmUpgrade qemu-commonUpgrade qemu | Nov 14, 2019 | Jul 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub