An out-of-bounds write vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw occurs while processing the 'VIRTIO_GPU_CMD_GET_CAPSET' command from the guest. It could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service condition, or potential code execution with the privileges of the QEMU process.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Jun 2, 2021 |
| Debian | — | Upgrade qemu | Nov 4, 2022 | Jun 2, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 28, 2022 | Jun 2, 2021 |
| Oracle_linux | — | Upgrade libguestfs-benchmarkingUpgrade qemu-kvm-block-curlUpgrade qemu-block-glusterUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-bash-completionUpgrade nbdkit-gzip-pluginUpgrade qemuUpgrade libvirt-dbusUpgrade libvirt-daemon-config-networkUpgrade python3-hivexUpgrade qemu-kvmUpgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade libguestfs-tools-cUpgrade libguestfs-gobject-develUpgrade libvirt-adminUpgrade nbdkit-vddk-pluginUpgrade libguestfs-rescueUpgrade libguestfs-java-develUpgrade libguestfs-man-pages-jaUpgrade libiscsi-utilsUpgrade libvirt-daemonUpgrade qemu-commonUpgrade qemu-guest-agentUpgrade nbdkit-bash-completionUpgrade qemu-system-x86-coreUpgrade libguestfs-develUpgrade libguestfs-man-pages-ukUpgrade nbdkit-example-pluginsUpgrade nbdkitUpgrade nbdkit-curl-pluginUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-glusterUpgrade sgabios-binUpgrade python3-libguestfsUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-serverUpgrade nbdfuseUpgrade libvirt-bash-completionUpgrade libguestfsUpgrade libnbdUpgrade nbdkit-xz-filterUpgrade qemu-block-iscsiUpgrade libvirt-lock-sanlockUpgrade netcfUpgrade hivex-develUpgrade libnbd-develUpgrade libvirt-develUpgrade perl-Sys-VirtUpgrade libguestfs-rsyncUpgrade libguestfs-winsupportUpgrade seavgabios-binUpgrade supermin-develUpgrade lua-guestfsUpgrade libiscsiUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-gobjectUpgrade sgabiosUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-iscsiUpgrade virt-dibUpgrade qemu-kvm-block-rbdUpgrade nbdkit-ssh-pluginUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-javaUpgrade qemu-kvm-block-glusterUpgrade libvirt-nssUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-xfsUpgrade libguestfs-inspect-iconsUpgrade seabios-binUpgrade seabiosUpgrade qemu-kvm-coreUpgrade perl-Sys-GuestfsUpgrade netcf-develUpgrade nbdkit-develUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-rbdUpgrade python3-libvirtUpgrade nbdkit-linuxdisk-pluginUpgrade libvirtUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-interfaceUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade libvirt-daemon-driver-qemuUpgrade libiscsi-develUpgrade hivexUpgrade libvirt-clientUpgrade virt-v2vUpgrade ruby-hivexUpgrade libguestfs-javadocUpgrade nbdkit-basic-filtersUpgrade qemu-kvm-commonUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-logicalUpgrade python3-libnbdUpgrade nbdkit-python-pluginUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-toolsUpgrade ruby-libguestfsUpgrade qemu-imgUpgrade superminUpgrade qemu-system-aarch64-core | Aug 17, 2021 | May 4, 2021 |
| Suse | — | Upgrade qemu-block-nfsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ksmUpgrade qemu-ui-spice-appUpgrade qemu-ui-openglUpgrade qemu-ivshmem-toolsUpgrade qemu-chardev-spiceUpgrade qemu-s390xUpgrade qemu-toolsUpgrade qemu-testsuiteUpgrade qemu-extraUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-ipxeUpgrade qemu-vhost-user-gpuUpgrade qemu-ui-sdlUpgrade qemu-block-sshUpgrade qemu-block-iscsiUpgrade qemu-s390Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-sdlUpgrade qemu-chardev-baumUpgrade qemu-audio-spiceUpgrade qemu-langUpgrade qemu-hw-usb-smartcardUpgrade qemu-SLOFUpgrade qemu-hw-usb-redirectUpgrade qemu-seabiosUpgrade qemu-hw-display-qxlUpgrade qemu-ppcUpgrade qemu-armUpgrade qemu-accel-tcg-x86Upgrade qemu-ui-gtkUpgrade qemu-audio-alsaUpgrade qemu-hw-usb-hostUpgrade qemu-sgabiosUpgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-x86Upgrade qemu-block-glusterUpgrade qemu-microvmUpgrade qemu-ui-cursesUpgrade qemu-audio-paUpgrade qemu-kvmUpgrade qemu-ui-spice-coreUpgrade qemuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-linux-userUpgrade qemu-block-dmgUpgrade qemu-skibootUpgrade qemu-block-curl | Jul 1, 2021 | Jun 2, 2021 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-x86-microvmUpgrade qemu-system-s390xUpgrade qemu-system-x86-xenUpgrade qemu-system-ppc | Jul 16, 2021 | Jun 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub