An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.
CVSS Details
- CVSS 3.1 Base Score: 3.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Feb 25, 2021 |
| Debian | — | Upgrade qemu | Apr 12, 2021 | Feb 25, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | Feb 25, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 28, 2022 | Feb 25, 2021 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-storage-rbdUpgrade libiscsi-develUpgrade libvirt-daemon-driver-storageUpgrade sgabios-binUpgrade libvirt-daemonUpgrade qemu-block-glusterUpgrade qemu-block-rbdUpgrade libguestfs-javaUpgrade libguestfs-man-pages-ukUpgrade qemu-system-aarch64-coreUpgrade libguestfs-rsyncUpgrade qemu-kvm-commonUpgrade libnbdUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storage-mpathUpgrade supermin-develUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-driver-secretUpgrade libvirt-develUpgrade perl-Sys-VirtUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade python3-libvirtUpgrade libvirt-dbusUpgrade qemu-kvm-block-curlUpgrade libvirt-adminUpgrade libvirt-daemon-driver-interfaceUpgrade netcf-libsUpgrade libguestfs-gobject-develUpgrade libguestfs-javadocUpgrade hivex-develUpgrade libvirt-bash-completionUpgrade nbdkitUpgrade libnbd-develUpgrade libvirt-clientUpgrade nbdfuseUpgrade libguestfs-xfsUpgrade libvirt-daemon-config-networkUpgrade libguestfs-develUpgrade libvirt-nssUpgrade nbdkit-xz-filterUpgrade ivshmem-toolsUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-guest-agentUpgrade nbdkit-ssh-pluginUpgrade libguestfs-bash-completionUpgrade qemu-kvm-block-iscsiUpgrade virt-v2vUpgrade libvirt-daemon-config-nwfilterUpgrade virt-dibUpgrade superminUpgrade libguestfs-gfs2Upgrade netcfUpgrade seabios-binUpgrade seabiosUpgrade libguestfs-java-develUpgrade libguestfs-toolsUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-kvmUpgrade python3-hivexUpgrade seavgabios-binUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-curl-pluginUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-vddk-pluginUpgrade nbdkit-bash-completionUpgrade qemuUpgrade libvirtUpgrade python3-libguestfsUpgrade qemu-system-x86Upgrade nbdkit-gzip-pluginUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-tools-cUpgrade netcf-develUpgrade nbdkit-serverUpgrade qemu-kvm-block-sshUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-commonUpgrade perl-Sys-GuestfsUpgrade nbdkit-linuxdisk-pluginUpgrade nbdkit-develUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-gobjectUpgrade python3-libnbdUpgrade nbdkit-basic-filtersUpgrade libvirt-libsUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade qemu-system-aarch64Upgrade libguestfs-man-pages-jaUpgrade nbdkit-basic-pluginsUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libiscsiUpgrade perl-hivexUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-python-pluginUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-winsupportUpgrade libguestfsUpgrade ruby-hivexUpgrade hivexUpgrade qemu-imgUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-rescueUpgrade ruby-libguestfsUpgrade qemu-system-x86-coreUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-rbdUpgrade libvirt-lock-sanlock | Feb 5, 2022 | Jan 30, 2021 |
| Suse | — | Upgrade qemu-audio-paUpgrade qemu-microvmUpgrade qemu-ui-gtkUpgrade qemu-block-glusterUpgrade qemu-block-curlUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-testsuiteUpgrade qemu-block-sshUpgrade qemu-toolsUpgrade qemu-accel-tcg-x86Upgrade qemu-guest-agentUpgrade qemu-langUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-linux-userUpgrade qemu-ppcUpgrade qemu-armUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-usb-smartcardUpgrade qemu-vgabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-coreUpgrade qemu-skibootUpgrade qemu-hw-display-qxlUpgrade qemu-hw-usb-hostUpgrade qemuUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-vhost-user-gpuUpgrade qemu-ui-sdlUpgrade qemu-audio-spiceUpgrade qemu-kvmUpgrade qemu-slofUpgrade qemu-sgabiosUpgrade qemu-block-dmgUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpuUpgrade qemu-seabiosUpgrade qemu-audio-sdlUpgrade qemu-ui-openglUpgrade qemu-s390xUpgrade qemu-s390Upgrade qemu-ipxeUpgrade qemu-chardev-spiceUpgrade qemu-ksmUpgrade qemu-ui-cursesUpgrade qemu-ui-spice-appUpgrade qemu-block-nfsUpgrade qemu-extraUpgrade qemu-chardev-baum | Mar 2, 2021 | Feb 25, 2021 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-block-extra (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-system-sparcUpgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-x86-xenUpgrade qemu-user (Ubuntu Pro)Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu (Ubuntu Pro)Upgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-system-ppc | Mar 22, 2023 | Feb 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub