oss_write in audio/ossaudio.c in QEMU before 5.0.0 mishandles a buffer position.
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Aug 27, 2020 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Aug 27, 2020 |
| Oracle_linux | — | Upgrade qemuUpgrade qemu-block-glusterUpgrade qemu-system-x86-coreUpgrade qemu-kvmUpgrade qemu-commonUpgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade qemu-system-aarch64Upgrade qemu-system-aarch64-coreUpgrade qemu-block-iscsiUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade qemu-system-x86 | Feb 9, 2021 | Jan 20, 2020 |
| Ubuntu | — | Upgrade qemuUpgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-x86-microvmUpgrade qemu-system-sparcUpgrade qemu-system-x86-xen | Aug 20, 2020 | Aug 19, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub