oss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Aug 27, 2020 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Aug 27, 2020 |
| Oracle_linux | — | Upgrade qemu-block-rbdUpgrade qemuUpgrade qemu-block-glusterUpgrade ivshmem-toolsUpgrade qemu-commonUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-x86-coreUpgrade qemu-block-iscsiUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86 | Feb 9, 2021 | Jan 20, 2020 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-x86-xenUpgrade qemu-system-s390xUpgrade qemu-system-x86-microvmUpgrade qemu-system-mipsUpgrade qemuUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-arm | Aug 20, 2020 | Aug 19, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub