An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Sep 6, 2022 | Feb 24, 2022 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | Feb 24, 2022 |
| Oracle_linux | — | Upgrade nbdkit-serverUpgrade python3-libguestfsUpgrade nbdkit-linuxdisk-pluginUpgrade superminUpgrade libguestfs-rescueUpgrade hivexUpgrade libiscsiUpgrade libvirt-daemon-driver-qemuUpgrade seavgabios-binUpgrade nbdkit-develUpgrade nbdkit-gzip-pluginUpgrade nbdkit-vddk-pluginUpgrade netcf-develUpgrade python3-hivexUpgrade sgabiosUpgrade qemu-system-x86-coreUpgrade libvirt-nssUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemuUpgrade libguestfs-gobjectUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-scsiUpgrade ruby-libguestfsUpgrade seabiosUpgrade perl-hivexUpgrade qemu-system-aarch64Upgrade python3-libnbdUpgrade qemu-commonUpgrade lua-guestfsUpgrade nbdkit-basic-pluginsUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-glusterUpgrade libvirtUpgrade ruby-hivexUpgrade qemu-imgUpgrade libguestfs-bash-completionUpgrade qemu-block-glusterUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-python-pluginUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-inspect-iconsUpgrade libvirt-bash-completionUpgrade libvirt-lock-sanlockUpgrade libvirt-docsUpgrade nbdkit-basic-filtersUpgrade nbdkit-curl-pluginUpgrade libvirt-libsUpgrade netcf-libsUpgrade libvirt-dbusUpgrade python3-libvirtUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-rsyncUpgrade qemu-block-rbdUpgrade seabios-binUpgrade libnbd-develUpgrade libguestfs-javaUpgrade libguestfsUpgrade libguestfs-tools-cUpgrade ivshmem-toolsUpgrade libguestfs-xfsUpgrade libguestfs-gobject-develUpgrade hivex-develUpgrade libvirt-develUpgrade netcfUpgrade libvirt-daemon-config-networkUpgrade libvirt-clientUpgrade libvirt-adminUpgrade qemu-system-aarch64-coreUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-winsupportUpgrade nbdkit-ssh-pluginUpgrade nbdkit-example-pluginsUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-nwfilterUpgrade libiscsi-develUpgrade libguestfs-gfs2Upgrade nbdkit-xz-filterUpgrade qemu-block-iscsiUpgrade virt-dibUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libguestfs-develUpgrade sgabios-binUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-block-iscsiUpgrade nbdfuseUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-block-curlUpgrade libvirt-daemonUpgrade libnbdUpgrade libguestfs-man-pages-ukUpgrade qemu-system-x86Upgrade qemu-kvm-commonUpgrade qemu-guest-agentUpgrade libiscsi-utilsUpgrade libguestfs-man-pages-jaUpgrade libguestfs-java-develUpgrade virt-v2vUpgrade libvirt-daemon-driver-nwfilterUpgrade nbdkitUpgrade libguestfs-javadocUpgrade libguestfs-toolsUpgrade supermin-develUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-mpath | Aug 17, 2021 | Jun 17, 2021 |
| Suse | — | Upgrade qemuUpgrade qemu-skibootUpgrade qemu-ui-spice-appUpgrade qemu-ivshmem-toolsUpgrade qemu-block-dmgUpgrade qemu-audio-spiceUpgrade qemu-block-rbdUpgrade qemu-block-glusterUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-openglUpgrade qemu-audio-sdlUpgrade qemu-ui-spice-coreUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-qxlUpgrade qemu-ui-sdlUpgrade qemu-ipxeUpgrade qemu-ksmUpgrade qemu-testsuiteUpgrade qemu-armUpgrade qemu-guest-agentUpgrade qemu-s390xUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-seabiosUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemu-langUpgrade qemu-chardev-spiceUpgrade qemu-SLOFUpgrade qemu-hw-usb-hostUpgrade qemu-block-nfsUpgrade qemu-vhost-user-gpuUpgrade qemu-ppcUpgrade qemu-kvmUpgrade qemu-audio-alsaUpgrade qemu-vgabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-extraUpgrade qemu-audio-paUpgrade qemu-microvmUpgrade qemu-accel-tcg-x86Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390Upgrade qemu-hw-usb-smartcardUpgrade qemu-toolsUpgrade qemu-chardev-baumUpgrade qemu-x86Upgrade qemu-block-curlUpgrade qemu-sgabiosUpgrade qemu-ui-cursesUpgrade qemu-linux-userUpgrade qemu-ui-gtk | Jul 22, 2021 | Jul 15, 2021 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-x86-xenUpgrade qemu-system-ppcUpgrade qemu-system-x86-microvmUpgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-x86 | Jul 16, 2021 | Jul 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub