oss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Aug 27, 2020 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Aug 27, 2020 |
| Oracle_linux | — | Upgrade qemu-system-x86Upgrade qemu-imgUpgrade qemu-system-aarch64-coreUpgrade qemu-block-iscsiUpgrade qemu-kvm-coreUpgrade qemu-block-rbdUpgrade qemu-kvmUpgrade ivshmem-toolsUpgrade qemu-block-glusterUpgrade qemuUpgrade qemu-system-x86-coreUpgrade qemu-system-aarch64Upgrade qemu-common | Feb 9, 2021 | Jan 20, 2020 |
| Ubuntu | — | Upgrade qemu-system-x86-microvmUpgrade qemu-system-x86-xenUpgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemuUpgrade qemu-system-arm | Aug 20, 2020 | Aug 19, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub