In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-guest-agentUpgrade qemu-kvm-common | Aug 2, 2019 | Feb 15, 2019 |
| Debian | — | Upgrade slirp4netnsUpgrade qemu | Mar 12, 2019 | Mar 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Dec 4, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Nov 19, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-system-aarch64-coreUpgrade qemu-block-curlUpgrade qemu-audio-ossUpgrade qemu-ui-gtkUpgrade qemu-audio-paUpgrade qemu-block-sshUpgrade qemu-audio-alsaUpgrade qemu-block-dmgUpgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade qemu-commonUpgrade qemu-block-nfsUpgrade qemu-block-glusterUpgrade qemu-system-aarch64Upgrade qemu-audio-sdlUpgrade qemu-kvmUpgrade qemu-ui-cursesUpgrade qemu-ui-sdlUpgrade qemu-img | Aug 28, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade qemu-system-aarch64-coreUpgrade qemu-imgUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-kvm-coreUpgrade qemu-block-iscsiUpgrade qemu-system-x86-coreUpgrade qemu-guest-agentUpgrade qemu-commonUpgrade qemuUpgrade qemu-system-aarch64Upgrade ivshmem-toolsUpgrade qemu-block-glusterUpgrade qemu-block-rbdUpgrade qemu-kvm-commonUpgrade qemu-kvm-tools | May 15, 2019 | Jan 11, 2019 |
| Redhat_linux | — | Upgrade qemu-kvmNo solution existsUpgrade qemu-guest-agentUpgrade qemu-imgUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-tools | Jul 30, 2019 | Mar 21, 2019 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade fuse3Upgrade qemu-testsuiteUpgrade qemu-ui-cursesUpgrade qemu-ui-openglUpgrade qemu-s390Upgrade qemu-audio-ossUpgrade qemu-armUpgrade qemu-ksmUpgrade slirp4netnsUpgrade qemu-chardev-spiceUpgrade qemu-linux-userUpgrade qemu-ui-sdlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-seabiosUpgrade qemu-block-curlUpgrade libfuse3-3Upgrade xen-kmp-paeUpgrade xen-libsUpgrade qemu-skibootUpgrade qemu-block-dmgUpgrade qemu-block-iscsiUpgrade qemu-audio-paUpgrade qemu-ui-spice-coreUpgrade qemu-block-glusterUpgrade qemu-ui-spice-appUpgrade qemu-ui-gtkUpgrade qemu-audio-alsaUpgrade qemu-hw-usb-redirectUpgrade fuse3-develUpgrade xen-develUpgrade xen-libs-32bitUpgrade podmanUpgrade qemu-sgabiosUpgrade fuse-overlayfsUpgrade qemu-toolsUpgrade qemu-ppcUpgrade qemu-block-rbdUpgrade qemu-microvmUpgrade qemu-chardev-baumUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade qemu-audio-sdlUpgrade qemu-block-nfsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ipxeUpgrade qemu-s390xUpgrade qemu-block-sshUpgrade qemu-extraUpgrade qemuUpgrade libcontainers-commonUpgrade fuse3-docUpgrade kvmUpgrade qemu-hw-display-qxlUpgrade qemu-x86Upgrade podman-cni-configUpgrade xenUpgrade qemu-langUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-doc-htmlUpgrade xen-tools-domUUpgrade xen-toolsUpgrade qemu-audio-spice | Feb 16, 2019 | Feb 15, 2019 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-guiUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-data | Apr 3, 2019 | Feb 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub