hw/ppc/spapr.c in QEMU through 3.1.0 allows Information Exposure because the hypervisor shares the /proc/device-tree/system-id and /proc/device-tree/model system attributes with a guest.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade qemu-block-iscsiUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-kvm-coreUpgrade qemu-commonUpgrade qemu-kvmUpgrade qemu-block-glusterUpgrade qemu-system-aarch64Upgrade qemu-system-aarch64-coreUpgrade ivshmem-toolsUpgrade qemu-img | May 15, 2019 | Feb 2, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 21, 2019 |
| Suse | — | Upgrade qemu-microvmUpgrade qemu-s390xUpgrade qemu-ui-gtkUpgrade qemu-sgabiosUpgrade qemu-audio-alsaUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ksmUpgrade qemu-ui-spice-coreUpgrade qemu-extraUpgrade qemu-hw-usb-redirectUpgrade qemu-vgabiosUpgrade qemu-audio-spiceUpgrade qemu-block-rbdUpgrade qemu-s390Upgrade qemu-block-curlUpgrade qemu-block-iscsiUpgrade qemu-x86Upgrade qemu-seabiosUpgrade qemu-kvmUpgrade qemu-chardev-baumUpgrade qemu-skibootUpgrade qemu-ui-openglUpgrade qemuUpgrade qemu-guest-agentUpgrade qemu-block-dmgUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ipxeUpgrade qemu-chardev-spiceUpgrade qemu-langUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-ossUpgrade qemu-block-sshUpgrade qemu-ui-spice-appUpgrade qemu-block-glusterUpgrade qemu-ppcUpgrade qemu-armUpgrade qemu-hw-display-qxlUpgrade qemu-audio-paUpgrade qemu-ui-cursesUpgrade qemu-tools | Apr 17, 2019 | Mar 21, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub