In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-guest-agent | Aug 2, 2019 | Feb 15, 2019 |
| Debian | — | Upgrade slirp4netnsUpgrade qemu | Mar 12, 2019 | Mar 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Dec 4, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Nov 19, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-block-curlUpgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade qemu-audio-alsaUpgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemu-block-sshUpgrade qemu-block-dmgUpgrade qemu-system-aarch64-coreUpgrade qemu-ui-gtkUpgrade qemu-audio-sdlUpgrade qemu-system-aarch64Upgrade qemu-block-nfsUpgrade qemu-kvmUpgrade qemu-block-glusterUpgrade qemu-ui-sdlUpgrade qemu-imgUpgrade qemu-commonUpgrade qemu-ui-curses | Aug 28, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-coreUpgrade qemu-system-x86Upgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-block-rbdUpgrade qemu-system-x86-coreUpgrade qemu-block-glusterUpgrade ivshmem-toolsUpgrade qemu-system-aarch64Upgrade qemu-commonUpgrade qemu | May 15, 2019 | Jan 11, 2019 |
| Redhat_linux | — | No solution existsUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-kvm-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm-tools | Jul 30, 2019 | Mar 21, 2019 |
| Suse | — | Upgrade qemu-block-glusterUpgrade qemu-s390Upgrade qemu-hw-display-virtio-vgaUpgrade qemu-ksmUpgrade qemu-chardev-spiceUpgrade qemu-ui-openglUpgrade qemu-audio-alsaUpgrade xen-kmp-paeUpgrade qemu-skibootUpgrade qemu-linux-userUpgrade fuse3Upgrade qemu-block-curlUpgrade qemu-audio-ossUpgrade qemu-seabiosUpgrade qemu-ui-cursesUpgrade slirp4netnsUpgrade libfuse3-3Upgrade qemu-block-iscsiUpgrade qemu-ui-spice-coreUpgrade qemu-audio-paUpgrade qemu-ui-sdlUpgrade qemu-ui-spice-appUpgrade xen-libsUpgrade qemu-block-dmgUpgrade qemu-ui-gtkUpgrade qemu-testsuiteUpgrade xen-kmp-defaultUpgrade qemu-armUpgrade qemu-langUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade xen-develUpgrade podman-cni-configUpgrade fuse-overlayfsUpgrade qemu-ppcUpgrade qemu-block-rbdUpgrade kvmUpgrade qemuUpgrade qemu-s390xUpgrade qemu-microvmUpgrade qemu-ipxeUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-nfsUpgrade qemu-audio-sdlUpgrade fuse3-docUpgrade libcontainers-commonUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-guest-agentUpgrade xen-doc-htmlUpgrade qemu-hw-display-qxlUpgrade xen-tools-domUUpgrade xenUpgrade xen-libs-32bitUpgrade xen-toolsUpgrade podmanUpgrade qemu-x86Upgrade qemu-hw-usb-redirectUpgrade qemu-extraUpgrade qemu-chardev-baumUpgrade qemu-toolsUpgrade fuse3-develUpgrade qemu-sgabios | Feb 16, 2019 | Feb 15, 2019 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-dataUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-guiUpgrade qemu-system-sparcUpgrade qemu-system-x86 | Apr 3, 2019 | Feb 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub