hw/display/bochs-display.c in QEMU 4.0.0 does not ensure a sufficient PCI config space allocation, leading to a buffer overflow involving the PCIe extended config space.
CVSS Details
- CVSS 3.1 Base Score: 5.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Apr 29, 2020 | Mar 10, 2020 |
| Oracle_linux | — | Upgrade qemu-block-iscsiUpgrade qemu-system-x86Upgrade qemu-system-aarch64-coreUpgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade qemu-commonUpgrade qemuUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-block-glusterUpgrade qemu-system-x86-core | Feb 9, 2021 | Aug 12, 2019 |
| Suse | — | Upgrade qemu-extraUpgrade qemu-block-sshUpgrade qemu-ipxeUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-audio-sdlUpgrade qemu-vgabiosUpgrade qemu-block-rbdUpgrade qemu-seabiosUpgrade qemu-kvmUpgrade qemu-ksmUpgrade qemu-ui-sdlUpgrade qemu-s390Upgrade qemu-linux-userUpgrade qemu-x86Upgrade qemu-langUpgrade qemu-block-dmgUpgrade qemu-audio-paUpgrade qemu-block-glusterUpgrade qemu-ppcUpgrade qemu-toolsUpgrade qemu-ui-cursesUpgrade qemu-guest-agentUpgrade qemu-block-iscsiUpgrade qemu-block-nfsUpgrade qemu-sgabiosUpgrade qemuUpgrade qemu-ui-gtkUpgrade qemu-armUpgrade qemu-audio-oss | Apr 2, 2020 | Mar 10, 2020 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemuUpgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-sparc | May 22, 2020 | Mar 10, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub