hw/display/bochs-display.c in QEMU 4.0.0 does not ensure a sufficient PCI config space allocation, leading to a buffer overflow involving the PCIe extended config space.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Apr 29, 2020 | Mar 10, 2020 |
| Oracle_linux | — | Upgrade qemu-system-aarch64-coreUpgrade ivshmem-toolsUpgrade qemu-system-x86Upgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade qemu-system-aarch64Upgrade qemu-commonUpgrade qemuUpgrade qemu-kvmUpgrade qemu-system-x86-coreUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade qemu-block-gluster | Feb 9, 2021 | Aug 12, 2019 |
| Suse | — | Upgrade qemu-kvmUpgrade qemu-extraUpgrade qemu-s390Upgrade qemu-seabiosUpgrade qemu-block-rbdUpgrade qemu-ipxeUpgrade qemu-block-curlUpgrade qemu-ksmUpgrade qemu-vgabiosUpgrade qemu-audio-sdlUpgrade qemu-ui-sdlUpgrade qemu-audio-alsaUpgrade qemu-block-sshUpgrade qemu-ui-gtkUpgrade qemu-x86Upgrade qemu-toolsUpgrade qemu-block-glusterUpgrade qemu-audio-paUpgrade qemu-guest-agentUpgrade qemu-ui-cursesUpgrade qemu-linux-userUpgrade qemu-armUpgrade qemuUpgrade qemu-sgabiosUpgrade qemu-ppcUpgrade qemu-audio-ossUpgrade qemu-block-dmgUpgrade qemu-langUpgrade qemu-block-iscsiUpgrade qemu-block-nfs | Apr 2, 2020 | Mar 10, 2020 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemuUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-s390x | May 22, 2020 | Mar 10, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub