In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade qemu-guest-agent | Aug 2, 2019 | Feb 15, 2019 |
| Debian | — | Upgrade qemuUpgrade slirp4netns | Mar 12, 2019 | Mar 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 4, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Nov 19, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-block-nfsUpgrade qemu-kvmUpgrade qemu-ui-cursesUpgrade qemu-audio-sdlUpgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemu-commonUpgrade qemu-ui-sdlUpgrade qemu-block-glusterUpgrade qemu-audio-paUpgrade qemu-audio-alsaUpgrade qemu-audio-ossUpgrade qemu-block-curlUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-block-dmgUpgrade qemu-ui-gtkUpgrade qemu-block-sshUpgrade qemu-block-rbd | Aug 28, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-guest-agentUpgrade qemu-system-aarch64Upgrade ivshmem-toolsUpgrade qemu-kvm-commonUpgrade qemu-system-x86-coreUpgrade qemu-kvm-toolsUpgrade qemu-block-rbdUpgrade qemu-commonUpgrade qemu-block-glusterUpgrade qemu | May 15, 2019 | Jan 11, 2019 |
| Redhat_linux | — | Upgrade qemu-kvmNo solution existsUpgrade qemu-guest-agentUpgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-tools | Jul 30, 2019 | Mar 21, 2019 |
| Suse | — | Upgrade qemu-s390Upgrade qemu-ui-sdlUpgrade qemu-ui-spice-coreUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-appUpgrade libfuse3-3Upgrade qemu-ui-openglUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ksmUpgrade qemu-chardev-spiceUpgrade qemu-linux-userUpgrade qemu-block-curlUpgrade xen-kmp-defaultUpgrade qemu-ui-gtkUpgrade qemu-armUpgrade qemu-audio-alsaUpgrade qemu-block-glusterUpgrade qemu-skibootUpgrade qemu-seabiosUpgrade qemu-audio-ossUpgrade slirp4netnsUpgrade qemu-block-dmgUpgrade qemu-ui-cursesUpgrade fuse3Upgrade qemu-testsuiteUpgrade xen-kmp-paeUpgrade xen-libsUpgrade qemu-vgabiosUpgrade qemu-block-nfsUpgrade qemu-kvmUpgrade qemuUpgrade fuse3-docUpgrade libcontainers-commonUpgrade fuse-overlayfsUpgrade qemu-sgabiosUpgrade xen-develUpgrade fuse3-develUpgrade qemu-toolsUpgrade kvmUpgrade xen-libs-32bitUpgrade xen-doc-htmlUpgrade xen-tools-domUUpgrade xen-toolsUpgrade xenUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-langUpgrade qemu-hw-display-qxlUpgrade qemu-x86Upgrade podmanUpgrade qemu-ppcUpgrade qemu-microvmUpgrade qemu-block-rbdUpgrade qemu-chardev-baumUpgrade qemu-audio-spiceUpgrade qemu-guest-agentUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-sdlUpgrade podman-cni-configUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ipxeUpgrade qemu-block-sshUpgrade qemu-extra | Feb 16, 2019 | Feb 15, 2019 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-dataUpgrade qemu-system-x86Upgrade qemu-system-guiUpgrade qemu-system | Apr 3, 2019 | Feb 15, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub