In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-guest-agentUpgrade qemu-kvm-debuginfoUpgrade qemu-kvmUpgrade qemu-img | Aug 2, 2019 | Feb 15, 2019 |
| Debian | — | Upgrade qemuUpgrade slirp4netns | Mar 12, 2019 | Mar 12, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Nov 19, 2019 | Mar 21, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-block-glusterUpgrade qemu-block-nfsUpgrade qemu-system-aarch64Upgrade qemu-ui-cursesUpgrade qemu-audio-sdlUpgrade qemu-ui-sdlUpgrade qemu-kvmUpgrade qemu-commonUpgrade qemu-imgUpgrade qemu-audio-paUpgrade qemu-ui-gtkUpgrade qemu-block-dmgUpgrade qemu-system-aarch64-coreUpgrade qemu-block-iscsiUpgrade qemu-block-sshUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-audio-oss | Aug 28, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade qemu-guest-agentUpgrade qemu-system-x86-coreUpgrade qemu-block-glusterUpgrade ivshmem-toolsUpgrade qemuUpgrade qemu-system-aarch64Upgrade qemu-commonUpgrade qemu-block-rbdUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-system-aarch64-coreUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade qemu-system-x86Upgrade qemu-block-iscsi | May 15, 2019 | Jan 11, 2019 |
| Redhat_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvmNo solution existsUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-img | Jul 30, 2019 | Mar 21, 2019 |
| Suse | — | Upgrade qemu-chardev-spiceUpgrade qemu-ui-cursesUpgrade qemu-ui-spice-appUpgrade qemu-ui-spice-coreUpgrade qemu-armUpgrade qemu-ksmUpgrade qemu-block-iscsiUpgrade xen-kmp-defaultUpgrade qemu-ui-openglUpgrade qemu-linux-userUpgrade libfuse3-3Upgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-paUpgrade qemu-testsuiteUpgrade qemu-seabiosUpgrade qemu-s390Upgrade qemu-ui-sdlUpgrade slirp4netnsUpgrade qemu-audio-ossUpgrade qemu-block-curlUpgrade xen-kmp-paeUpgrade qemu-skibootUpgrade qemu-block-glusterUpgrade qemu-block-dmgUpgrade qemu-audio-alsaUpgrade xen-libsUpgrade qemu-ui-gtkUpgrade fuse3Upgrade qemu-block-sshUpgrade qemu-audio-spiceUpgrade fuse3-develUpgrade fuse-overlayfsUpgrade qemu-block-rbdUpgrade qemu-chardev-baumUpgrade qemu-ppcUpgrade qemu-extraUpgrade qemu-ipxeUpgrade xen-libs-32bitUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xenUpgrade qemu-langUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemuUpgrade libcontainers-commonUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-qxlUpgrade podmanUpgrade podman-cni-configUpgrade qemu-x86Upgrade qemu-block-nfsUpgrade qemu-audio-sdlUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade kvmUpgrade fuse3-docUpgrade qemu-s390xUpgrade xen-toolsUpgrade xen-doc-htmlUpgrade qemu-toolsUpgrade xen-tools-domuUpgrade xen-develUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-microvm | Feb 16, 2019 | Feb 15, 2019 |
| Ubuntu | — | Upgrade qemu-system-guiUpgrade qemu-systemUpgrade qemu-system-dataUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-s390x | Apr 3, 2019 | Feb 15, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub