In QEMU through 5.0.0, an integer overflow was found in the SM501 display driver implementation. This flaw occurs in the COPY_AREA macro while handling MMIO write operations through the sm501_2d_engine_write() callback. A local attacker could abuse this flaw to crash the QEMU process in sm501_2d_operation() in hw/display/sm501.c on the host, resulting in a denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Sep 8, 2020 | Aug 31, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Feb 8, 2021 | Aug 31, 2020 |
| Oracle_linux | — | Upgrade qemu-kvm-coreUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemu-commonUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-block-glusterUpgrade qemu-kvmUpgrade ivshmem-toolsUpgrade qemu-system-x86-coreUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64-core | Feb 9, 2021 | Dec 23, 2019 |
| Suse | — | Upgrade qemu-ppcUpgrade qemuUpgrade qemu-block-glusterUpgrade qemu-ipxeUpgrade qemu-ui-gtkUpgrade qemu-block-rbdUpgrade qemu-langUpgrade qemu-block-nfsUpgrade qemu-linux-userUpgrade qemu-audio-paUpgrade qemu-microvmUpgrade qemu-vgabiosUpgrade qemu-block-iscsiUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-block-sshUpgrade kvmUpgrade qemu-ui-spice-appUpgrade qemu-armUpgrade qemu-toolsUpgrade qemu-audio-sdlUpgrade qemu-vhost-user-gpuUpgrade qemu-seabiosUpgrade qemu-extraUpgrade qemu-audio-alsaUpgrade qemu-ui-sdlUpgrade qemu-block-curlUpgrade qemu-block-dmgUpgrade qemu-ksmUpgrade qemu-ui-cursesUpgrade qemu-s390Upgrade qemu-sgabiosUpgrade qemu-audio-ossUpgrade qemu-testsuiteUpgrade qemu-x86 | Apr 17, 2021 | Aug 19, 2020 |
| Ubuntu | — | Upgrade qemu-common (Ubuntu Pro)Upgrade qemuUpgrade qemu-system-sparcUpgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-aarch64Upgrade qemu-system-x86-xenUpgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu (Ubuntu Pro) | Aug 20, 2020 | Aug 19, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub