In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-kvm-debuginfoUpgrade qemu-kvmUpgrade qemu-img | Aug 2, 2019 | Feb 15, 2019 |
| Debian | — | Upgrade slirp4netnsUpgrade qemu | Mar 12, 2019 | Mar 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Nov 19, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-ui-sdlUpgrade qemu-kvmUpgrade qemu-audio-sdlUpgrade qemu-ui-cursesUpgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemu-block-glusterUpgrade qemu-block-nfsUpgrade qemu-commonUpgrade qemu-audio-ossUpgrade qemu-ui-gtkUpgrade qemu-block-sshUpgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-block-iscsiUpgrade qemu-block-dmgUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-system-aarch64-core | Aug 28, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade qemu-kvm-toolsUpgrade qemuUpgrade qemu-kvm-commonUpgrade ivshmem-toolsUpgrade qemu-commonUpgrade qemu-system-aarch64Upgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-block-glusterUpgrade qemu-system-x86-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-kvm-coreUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-system-x86Upgrade qemu-block-iscsi | May 15, 2019 | Jan 11, 2019 |
| Redhat_linux | — | Upgrade qemu-guest-agentNo solution existsUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-common | Jul 30, 2019 | Mar 21, 2019 |
| Suse | — | Upgrade qemu-block-sshUpgrade qemu-audio-spiceUpgrade xen-tools-domuUpgrade qemu-s390xUpgrade qemu-block-rbdUpgrade qemu-microvmUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-x86Upgrade kvmUpgrade podmanUpgrade qemu-hw-display-qxlUpgrade podman-cni-configUpgrade fuse3-docUpgrade qemu-hw-usb-redirectUpgrade qemu-extraUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-kvmUpgrade qemu-block-nfsUpgrade xen-doc-htmlUpgrade qemu-vgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xenUpgrade qemu-langUpgrade qemu-audio-sdlUpgrade xen-toolsUpgrade xen-develUpgrade fuse3-develUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade qemuUpgrade fuse-overlayfsUpgrade xen-libs-32bitUpgrade qemu-chardev-baumUpgrade qemu-guest-agentUpgrade libcontainers-commonUpgrade qemu-ipxeUpgrade qemu-ui-sdlUpgrade qemu-s390Upgrade qemu-audio-ossUpgrade qemu-block-curlUpgrade slirp4netnsUpgrade qemu-audio-paUpgrade libfuse3-3Upgrade qemu-ui-spice-appUpgrade qemu-linux-userUpgrade qemu-block-iscsiUpgrade xen-kmp-paeUpgrade qemu-audio-alsaUpgrade qemu-block-glusterUpgrade qemu-ksmUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-chardev-spiceUpgrade qemu-ui-spice-coreUpgrade qemu-testsuiteUpgrade qemu-armUpgrade fuse3Upgrade xen-kmp-defaultUpgrade qemu-ui-cursesUpgrade qemu-skibootUpgrade qemu-ui-gtkUpgrade qemu-block-dmgUpgrade xen-libsUpgrade qemu-seabios | Feb 16, 2019 | Feb 15, 2019 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-system-guiUpgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-data | Apr 3, 2019 | Feb 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub