QEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of up to 128 bytes in the hw/i2c/i2c-ddc.c:i2c_ddc() function. A local attacker with permission to execute i2c commands could exploit this to read stack memory of the qemu process on the host.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | May 31, 2019 | Feb 19, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-commonUpgrade qemu-ui-gtkUpgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade qemu-block-nfsUpgrade qemu-kvmUpgrade qemu-block-glusterUpgrade qemu-audio-paUpgrade qemu-block-sshUpgrade qemu-system-aarch64Upgrade qemu-ui-sdlUpgrade qemu-block-dmgUpgrade qemu-imgUpgrade qemu-block-curlUpgrade qemu-audio-sdlUpgrade qemu-ui-cursesUpgrade qemu-audio-alsaUpgrade qemu-system-aarch64-coreUpgrade qemu-audio-oss | Aug 28, 2019 | Feb 19, 2019 |
| Oracle_linux | — | Upgrade qemu-system-aarch64-coreUpgrade qemu-block-iscsiUpgrade qemu-imgUpgrade qemu-block-glusterUpgrade qemu-system-aarch64Upgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade qemu-kvm-coreUpgrade qemuUpgrade qemu-kvmUpgrade qemu-common | May 15, 2019 | Feb 18, 2019 |
| Suse | — | Upgrade qemu-toolsUpgrade qemu-armUpgrade qemuUpgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade qemu-extraUpgrade qemu-guest-agentUpgrade qemu-ksmUpgrade qemu-block-sshUpgrade qemu-seabiosUpgrade qemu-ipxeUpgrade qemu-langUpgrade qemu-block-glusterUpgrade qemu-s390Upgrade qemu-block-dmgUpgrade qemu-block-curlUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu-kvmUpgrade qemu-ui-cursesUpgrade qemu-audio-alsaUpgrade qemu-sgabiosUpgrade qemu-audio-ossUpgrade qemu-audio-paUpgrade qemu-ui-gtkUpgrade qemu-ppc | Apr 17, 2019 | Feb 19, 2019 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-guiUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-dataUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-s390x | Apr 3, 2019 | Feb 19, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub