ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index value during an ati_mm_read or ati_mm_write call.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Jun 4, 2020 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Jun 4, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Nov 12, 2020 | Jun 4, 2020 |
| Suse | — | Upgrade qemu-ui-openglUpgrade qemu-ipxeUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-coreUpgrade qemu-seabiosUpgrade qemu-ui-gtkUpgrade qemu-chardev-spiceUpgrade qemu-testsuiteUpgrade qemu-skibootUpgrade qemu-ui-spice-appUpgrade qemu-block-dmgUpgrade qemu-block-iscsiUpgrade qemu-vhost-user-gpuUpgrade qemu-audio-alsaUpgrade qemu-ksmUpgrade qemu-chardev-baumUpgrade qemu-microvmUpgrade qemu-s390Upgrade qemu-langUpgrade qemu-block-sshUpgrade qemu-ui-cursesUpgrade qemu-audio-sdlUpgrade qemu-block-curlUpgrade qemu-extraUpgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade qemu-block-rbdUpgrade qemu-toolsUpgrade qemu-armUpgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-linux-userUpgrade qemu-ppcUpgrade qemu-audio-paUpgrade qemu-guest-agentUpgrade qemu-block-glusterUpgrade qemu-x86Upgrade qemu-block-nfsUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-qxlUpgrade qemu-kvmUpgrade qemu-ui-sdlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpuUpgrade qemuUpgrade qemu-s390x | Jul 29, 2020 | Jun 4, 2020 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-x86-xenUpgrade qemu-system-x86-microvmUpgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemuUpgrade qemu-system-sparc | Aug 20, 2020 | Jun 4, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub