The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Sep 6, 2022 | Feb 24, 2022 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | Feb 24, 2022 |
| Oracle_linux | — | Upgrade libguestfs-gobject-develUpgrade hivex-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-ssh-pluginUpgrade python3-libvirtUpgrade libvirt-daemon-config-networkUpgrade libguestfs-xfsUpgrade libguestfs-gfs2Upgrade libguestfs-winsupportUpgrade qemu-kvmUpgrade libvirt-adminUpgrade qemu-system-aarch64-coreUpgrade libvirt-clientUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-java-develUpgrade libguestfs-javadocUpgrade libguestfs-toolsUpgrade libguestfs-man-pages-jaUpgrade qemu-system-x86Upgrade libguestfs-man-pages-ukUpgrade libiscsi-utilsUpgrade nbdkit-example-pluginsUpgrade nbdkitUpgrade ivshmem-toolsUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-block-curlUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdfuseUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemonUpgrade libnbdUpgrade libguestfs-tools-cUpgrade qemu-guest-agentUpgrade virt-dibUpgrade libguestfs-develUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade netcfUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-kvmUpgrade sgabios-binUpgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-xz-filterUpgrade libiscsi-develUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-commonUpgrade supermin-develUpgrade seabios-binUpgrade nbdkit-bash-completionUpgrade libguestfsUpgrade libnbd-develUpgrade libguestfs-rsyncUpgrade libvirt-develUpgrade libguestfs-javaUpgrade libguestfs-benchmarkingUpgrade virt-v2vUpgrade libvirt-daemon-driver-storageUpgrade qemu-block-glusterUpgrade libvirtUpgrade qemu-kvm-coreUpgrade python3-libnbdUpgrade libvirt-nssUpgrade libvirt-lock-sanlockUpgrade nbdkit-serverUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-basic-pluginsUpgrade libguestfs-gobjectUpgrade qemu-kvm-block-sshUpgrade hivexUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-curl-pluginUpgrade nbdkit-basic-filtersUpgrade libvirt-libsUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-linuxdisk-pluginUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-bash-completionUpgrade qemu-kvm-block-glusterUpgrade libguestfs-inspect-iconsUpgrade nbdkit-python-pluginUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-imgUpgrade seavgabios-binUpgrade libiscsiUpgrade netcf-develUpgrade nbdkit-gzip-pluginUpgrade nbdkit-vddk-pluginUpgrade nbdkit-develUpgrade python3-libguestfsUpgrade python3-hivexUpgrade superminUpgrade ruby-libguestfsUpgrade qemu-kvm-block-rbdUpgrade qemu-system-x86-coreUpgrade qemu-system-aarch64Upgrade seabiosUpgrade ruby-hivexUpgrade perl-hivexUpgrade libvirt-bash-completionUpgrade sgabiosUpgrade qemu-commonUpgrade qemu | Aug 17, 2021 | Jun 17, 2021 |
| Suse | — | Upgrade qemu-block-sshUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ipxeUpgrade qemu-audio-sdlUpgrade qemu-ui-spice-coreUpgrade qemu-ivshmem-toolsUpgrade qemu-audio-spiceUpgrade qemu-skibootUpgrade qemu-ui-spice-appUpgrade qemuUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-s390xUpgrade qemu-ui-openglUpgrade qemu-guest-agentUpgrade qemu-chardev-spiceUpgrade qemu-ksmUpgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemu-audio-ossUpgrade qemu-langUpgrade qemu-ui-sdlUpgrade qemu-armUpgrade qemu-testsuiteUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-glusterUpgrade qemu-hw-display-qxlUpgrade qemu-block-dmgUpgrade qemu-audio-alsaUpgrade qemu-sgabiosUpgrade qemu-linux-userUpgrade qemu-ui-gtkUpgrade qemu-microvmUpgrade qemu-audio-paUpgrade qemu-accel-tcg-x86Upgrade qemu-hw-usb-redirectUpgrade qemu-ui-cursesUpgrade qemu-hw-usb-hostUpgrade qemu-block-curlUpgrade qemu-chardev-baumUpgrade qemu-extraUpgrade qemu-SLOFUpgrade qemu-hw-usb-smartcardUpgrade qemu-toolsUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390Upgrade qemu-x86Upgrade qemu-vhost-user-gpuUpgrade qemu-block-nfsUpgrade qemu-ppcUpgrade qemu-vgabiosUpgrade qemu-kvm | Jul 22, 2021 | Jul 15, 2021 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-x86-xenUpgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-x86-microvmUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-sparc | Jul 16, 2021 | Jul 15, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub