An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service condition, or potential code execution with the privileges of the QEMU process.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Jun 2, 2021 |
| Debian | — | Upgrade qemu | Nov 4, 2022 | Jun 2, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 28, 2022 | Jun 2, 2021 |
| Oracle_linux | — | Upgrade libvirt-daemon-config-nwfilterUpgrade python3-libnbdUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-secretUpgrade ruby-libguestfsUpgrade nbdkit-basic-pluginsUpgrade nbdkit-python-pluginUpgrade libguestfs-toolsUpgrade ruby-hivexUpgrade seavgabios-binUpgrade libvirt-clientUpgrade virt-v2vUpgrade libguestfs-gfs2Upgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-block-rbdUpgrade libguestfs-javaUpgrade nbdkit-ssh-pluginUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-logicalUpgrade python3-libvirtUpgrade sgabiosUpgrade perl-hivexUpgrade virt-dibUpgrade libvirtUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-linuxdisk-pluginUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storageUpgrade supermin-develUpgrade hivexUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade libiscsi-develUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-imgUpgrade libvirt-nssUpgrade qemu-system-aarch64-coreUpgrade seabios-binUpgrade libvirt-libsUpgrade lua-guestfsUpgrade nbdkit-basic-filtersUpgrade libguestfs-xfsUpgrade superminUpgrade libguestfs-javadocUpgrade qemu-kvm-coreUpgrade libiscsiUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-inspect-iconsUpgrade libvirt-docsUpgrade nbdkit-develUpgrade netcf-develUpgrade seabiosUpgrade qemu-kvm-block-glusterUpgrade libguestfs-benchmarkingUpgrade libguestfs-rescueUpgrade libvirt-daemonUpgrade qemu-kvm-block-curlUpgrade libguestfs-gobject-develUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-man-pages-jaUpgrade qemu-guest-agentUpgrade nbdkit-serverUpgrade qemu-kvmUpgrade python3-hivexUpgrade nbdkit-gzip-pluginUpgrade libvirt-daemon-config-networkUpgrade libguestfs-tools-cUpgrade libguestfs-bash-completionUpgrade ivshmem-toolsUpgrade libiscsi-utilsUpgrade libguestfs-rsyncUpgrade perl-Sys-VirtUpgrade libvirt-develUpgrade libnbd-develUpgrade libnbdUpgrade qemuUpgrade libguestfs-winsupportUpgrade qemu-kvm-block-sshUpgrade qemu-commonUpgrade netcf-libsUpgrade nbdkit-example-pluginsUpgrade libguestfs-develUpgrade qemu-system-x86-coreUpgrade libguestfs-man-pages-ukUpgrade sgabios-binUpgrade qemu-kvm-block-iscsiUpgrade python3-libguestfsUpgrade nbdkit-bash-completionUpgrade nbdfuseUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-dbusUpgrade nbdkitUpgrade qemu-block-rbdUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade qemu-block-glusterUpgrade nbdkit-curl-pluginUpgrade nbdkit-vddk-pluginUpgrade libvirt-adminUpgrade libvirt-bash-completionUpgrade libguestfsUpgrade hivex-develUpgrade qemu-block-iscsiUpgrade netcfUpgrade nbdkit-xz-filterUpgrade libvirt-lock-sanlock | Aug 17, 2021 | May 4, 2021 |
| Suse | — | Upgrade qemu-toolsUpgrade qemu-ui-spice-appUpgrade qemu-block-rbdUpgrade qemu-chardev-spiceUpgrade qemu-vhost-user-gpuUpgrade qemu-s390Upgrade qemu-ksmUpgrade qemu-extraUpgrade qemu-block-nfsUpgrade qemu-audio-spiceUpgrade qemu-ui-sdlUpgrade qemu-block-sshUpgrade qemu-chardev-baumUpgrade qemu-audio-sdlUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-s390xUpgrade qemu-ui-openglUpgrade qemu-ipxeUpgrade qemu-langUpgrade qemu-guest-agentUpgrade qemu-block-iscsiUpgrade qemu-ivshmem-toolsUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-testsuiteUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-cursesUpgrade qemu-skibootUpgrade qemu-sgabiosUpgrade qemu-seabiosUpgrade qemu-kvmUpgrade qemu-ppcUpgrade qemu-hw-display-qxlUpgrade qemu-vgabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-block-dmgUpgrade qemu-audio-paUpgrade qemu-block-curlUpgrade qemu-block-glusterUpgrade qemu-SLOFUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-usb-smartcardUpgrade qemuUpgrade qemu-microvmUpgrade qemu-accel-tcg-x86Upgrade qemu-ui-spice-coreUpgrade qemu-linux-userUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade qemu-armUpgrade qemu-x86Upgrade qemu-hw-usb-host | Jul 1, 2021 | Jun 2, 2021 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-x86-xenUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-x86-microvmUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-arm | Jul 16, 2021 | Jun 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub