ati-vga in hw/display/ati.c in QEMU 4.2.0 allows guest OS users to trigger infinite recursion via a crafted mm_index value during an ati_mm_read or ati_mm_write call.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Jun 4, 2020 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Jun 4, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Nov 12, 2020 | Jun 4, 2020 |
| Suse | — | Upgrade qemu-block-curlUpgrade qemu-ui-spice-appUpgrade qemu-audio-sdlUpgrade qemu-ipxeUpgrade qemu-block-iscsiUpgrade qemu-seabiosUpgrade qemu-langUpgrade qemu-s390Upgrade qemu-ksmUpgrade qemu-hw-usb-redirectUpgrade qemu-microvmUpgrade qemu-chardev-spiceUpgrade qemu-extraUpgrade qemu-chardev-baumUpgrade qemu-testsuiteUpgrade qemu-audio-alsaUpgrade qemu-block-sshUpgrade qemu-skibootUpgrade qemu-vhost-user-gpuUpgrade qemu-block-dmgUpgrade qemu-ui-gtkUpgrade qemu-ui-openglUpgrade qemu-ui-cursesUpgrade qemu-ui-spice-coreUpgrade qemu-armUpgrade qemu-linux-userUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-paUpgrade qemu-ppcUpgrade qemu-hw-display-qxlUpgrade qemu-sgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-kvmUpgrade qemu-toolsUpgrade qemu-s390xUpgrade qemu-block-glusterUpgrade qemu-block-nfsUpgrade qemu-hw-display-virtio-vgaUpgrade qemuUpgrade qemu-guest-agentUpgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-sdlUpgrade qemu-audio-spiceUpgrade qemu-x86Upgrade qemu-block-rbd | Jul 29, 2020 | Jun 4, 2020 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-x86-microvmUpgrade qemu-system-ppcUpgrade qemu-system-x86-xenUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu | Aug 20, 2020 | Jun 4, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub