An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario.
CVSS Details
- CVSS 3.1 Base Score: 3.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Feb 25, 2021 |
| Debian | — | Upgrade qemu | Apr 12, 2021 | Feb 25, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | Feb 25, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 28, 2022 | Feb 25, 2021 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-qemuUpgrade libvirtUpgrade qemu-kvm-block-rbdUpgrade libguestfs-gobjectUpgrade libguestfs-inspect-iconsUpgrade nbdkit-gzip-pluginUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-commonUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-diskUpgrade lua-guestfsUpgrade python3-hivexUpgrade qemuUpgrade nbdkit-vddk-pluginUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-logicalUpgrade ruby-hivexUpgrade nbdkit-basic-filtersUpgrade nbdkit-linuxdisk-pluginUpgrade seavgabios-binUpgrade qemu-system-aarch64Upgrade qemu-kvm-coreUpgrade qemu-system-x86-coreUpgrade qemu-kvm-block-glusterUpgrade libguestfs-rescueUpgrade libguestfsUpgrade libguestfs-winsupportUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-coreUpgrade python3-libnbdUpgrade perl-Sys-GuestfsUpgrade nbdkit-develUpgrade hivexUpgrade libvirt-lock-sanlockUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-docsUpgrade nbdkit-python-pluginUpgrade libvirt-libsUpgrade nbdkit-curl-pluginUpgrade nbdkit-basic-pluginsUpgrade netcf-develUpgrade nbdkit-bash-completionUpgrade qemu-system-x86Upgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-serverUpgrade qemu-kvm-block-sshUpgrade perl-hivexUpgrade sgabiosUpgrade python3-libguestfsUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-kvmUpgrade qemu-system-aarch64-coreUpgrade qemu-kvm-commonUpgrade nbdfuseUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-bash-completionUpgrade seabios-binUpgrade sgabios-binUpgrade netcf-libsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-adminUpgrade libiscsi-utilsUpgrade qemu-block-rbdUpgrade libguestfs-gfs2Upgrade libvirt-dbusUpgrade virt-v2vUpgrade superminUpgrade seabiosUpgrade netcfUpgrade nbdkit-ssh-pluginUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-config-nwfilterUpgrade perl-Sys-VirtUpgrade libvirt-develUpgrade libiscsi-develUpgrade libguestfs-toolsUpgrade virt-dibUpgrade supermin-develUpgrade libguestfs-java-develUpgrade qemu-kvm-block-curlUpgrade qemu-block-iscsiUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-secretUpgrade qemu-block-glusterUpgrade libguestfs-javaUpgrade libguestfs-rsyncUpgrade libguestfs-man-pages-ukUpgrade libnbdUpgrade libguestfs-develUpgrade libvirt-clientUpgrade libguestfs-gobject-develUpgrade nbdkitUpgrade libvirt-nssUpgrade nbdkit-xz-filterUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libguestfs-xfsUpgrade ivshmem-toolsUpgrade libnbd-develUpgrade libguestfs-javadocUpgrade hivex-develUpgrade qemu-kvm-block-iscsiUpgrade python3-libvirtUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-benchmarkingUpgrade qemu-guest-agentUpgrade qemu-kvm | Feb 5, 2022 | Jan 30, 2021 |
| Suse | — | Upgrade qemu-block-rbdUpgrade qemu-hw-display-qxlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-curlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-guest-agentUpgrade qemu-testsuiteUpgrade qemu-ui-gtkUpgrade qemu-block-glusterUpgrade qemu-armUpgrade qemu-microvmUpgrade qemu-block-sshUpgrade qemu-toolsUpgrade qemu-audio-paUpgrade qemu-accel-tcg-x86Upgrade qemu-vgabiosUpgrade qemu-ppcUpgrade qemu-hw-usb-smartcardUpgrade qemu-hw-usb-hostUpgrade qemu-langUpgrade qemu-hw-usb-redirectUpgrade qemu-linux-userUpgrade qemu-audio-alsaUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemuUpgrade qemu-skibootUpgrade qemu-ui-spice-coreUpgrade qemu-s390Upgrade qemu-vhost-user-gpuUpgrade qemu-ui-cursesUpgrade qemu-block-dmgUpgrade qemu-seabiosUpgrade qemu-ui-openglUpgrade qemu-block-nfsUpgrade qemu-slofUpgrade qemu-ksmUpgrade qemu-kvmUpgrade qemu-ipxeUpgrade qemu-chardev-spiceUpgrade qemu-ui-sdlUpgrade qemu-ui-spice-appUpgrade qemu-extraUpgrade qemu-audio-spiceUpgrade qemu-s390xUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-sdlUpgrade qemu-x86Upgrade qemu-chardev-baum | Mar 2, 2021 | Feb 25, 2021 |
| Ubuntu | — | Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-block-extra (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-x86-xenUpgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-utils (Ubuntu Pro)Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-user (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro) | Mar 22, 2023 | Feb 25, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub