A flaw was found in QEMU in the implementation of the Pointer Authentication (PAuth) support for ARM introduced in version 4.0 and fixed in version 5.0.0. A general failure of the signature generation process caused every PAuth-enforced pointer to be signed with the same signature. A local attacker could obtain the signature of a protected pointer and abuse this flaw to bypass PAuth protection for all programs running on QEMU.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Jun 4, 2020 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade qemu-system-aarch64-coreUpgrade qemu-block-glusterUpgrade qemu-system-x86Upgrade qemu-block-iscsiUpgrade qemu-kvm-coreUpgrade qemu-commonUpgrade qemu-block-rbdUpgrade qemu-kvmUpgrade qemu-system-x86-coreUpgrade qemuUpgrade ivshmem-toolsUpgrade qemu-system-aarch64 | Feb 9, 2021 | Apr 2, 2020 |
| Suse | — | Upgrade qemu-hw-display-qxlUpgrade qemu-ipxeUpgrade qemu-kvmUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-chardev-spiceUpgrade qemu-block-rbdUpgrade qemu-vgabiosUpgrade qemuUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-langUpgrade qemu-ui-spice-coreUpgrade qemu-sgabiosUpgrade qemu-ui-spice-appUpgrade qemu-s390xUpgrade qemu-audio-spiceUpgrade qemu-chardev-baumUpgrade qemu-guest-agentUpgrade qemu-ppcUpgrade qemu-toolsUpgrade qemu-block-curlUpgrade qemu-s390Upgrade qemu-ui-cursesUpgrade qemu-ksmUpgrade qemu-audio-paUpgrade qemu-microvmUpgrade qemu-audio-alsaUpgrade qemu-seabiosUpgrade qemu-ui-gtkUpgrade qemu-block-iscsiUpgrade qemu-x86Upgrade qemu-skibootUpgrade qemu-armUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-vga | Feb 4, 2022 | May 21, 2020 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemuUpgrade qemu-system-ppc | May 22, 2020 | May 21, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub