An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Sep 6, 2022 | Feb 24, 2022 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | Feb 24, 2022 |
| Oracle_linux | — | Upgrade perl-hivexUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-scsiUpgrade ruby-hivexUpgrade qemu-system-aarch64Upgrade seabiosUpgrade libguestfs-gobjectUpgrade nbdkit-develUpgrade libiscsiUpgrade nbdkit-gzip-pluginUpgrade qemu-commonUpgrade libvirt-lock-sanlockUpgrade nbdkit-basic-pluginsUpgrade libvirt-nssUpgrade libvirtUpgrade sgabiosUpgrade nbdkit-vddk-pluginUpgrade netcf-develUpgrade libguestfs-bash-completionUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-networkUpgrade ruby-libguestfsUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-libsUpgrade nbdkit-basic-filtersUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-curl-pluginUpgrade perl-Sys-GuestfsUpgrade python3-hivexUpgrade qemu-kvm-coreUpgrade nbdkit-linuxdisk-pluginUpgrade nbdkit-serverUpgrade hivexUpgrade python3-libguestfsUpgrade qemu-imgUpgrade libguestfs-rescueUpgrade libvirt-docsUpgrade superminUpgrade qemu-system-x86-coreUpgrade seavgabios-binUpgrade qemuUpgrade qemu-block-glusterUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-python-pluginUpgrade lua-guestfsUpgrade python3-libnbdUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-bash-completionUpgrade libnbdUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nwfilterUpgrade nbdfuseUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libguestfs-xfsUpgrade libguestfs-rsyncUpgrade qemu-block-iscsiUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-xz-filterUpgrade supermin-develUpgrade qemu-block-rbdUpgrade virt-v2vUpgrade netcf-libsUpgrade qemu-system-x86Upgrade qemu-kvm-commonUpgrade qemu-guest-agentUpgrade nbdkitUpgrade libiscsi-utilsUpgrade libguestfs-man-pages-ukUpgrade libguestfs-man-pages-jaUpgrade libguestfs-javadocUpgrade libguestfs-java-develUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-gfs2Upgrade qemu-system-aarch64-coreUpgrade qemu-kvmUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-adminUpgrade libvirt-clientUpgrade virt-dibUpgrade nbdkit-example-pluginsUpgrade libvirt-dbusUpgrade libguestfs-benchmarkingUpgrade hivex-develUpgrade sgabios-binUpgrade netcfUpgrade nbdkit-ssh-pluginUpgrade libvirt-daemon-kvmUpgrade libguestfsUpgrade seabios-binUpgrade libguestfs-develUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-config-nwfilterUpgrade python3-libvirtUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-develUpgrade libiscsi-develUpgrade libguestfs-javaUpgrade libnbd-develUpgrade libguestfs-toolsUpgrade libguestfs-tools-cUpgrade ivshmem-tools | Aug 17, 2021 | Jun 17, 2021 |
| Suse | — | Upgrade qemu-linux-userUpgrade qemu-sgabiosUpgrade qemu-chardev-baumUpgrade qemu-extraUpgrade qemu-ui-cursesUpgrade qemu-hw-usb-hostUpgrade qemu-block-curlUpgrade qemu-hw-usb-redirectUpgrade qemu-toolsUpgrade qemu-x86Upgrade qemu-ui-gtkUpgrade qemu-s390Upgrade qemu-audio-alsaUpgrade qemu-hw-usb-smartcardUpgrade qemu-microvmUpgrade qemu-vgabiosUpgrade qemu-vhost-user-gpuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-paUpgrade qemu-block-nfsUpgrade qemu-kvmUpgrade qemu-ppcUpgrade qemu-accel-tcg-x86Upgrade qemu-testsuiteUpgrade qemuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-dmgUpgrade qemu-audio-spiceUpgrade qemu-audio-ossUpgrade qemu-ui-spice-coreUpgrade qemu-slofUpgrade qemu-audio-sdlUpgrade qemu-langUpgrade qemu-ksmUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-guest-agentUpgrade qemu-ui-openglUpgrade qemu-ipxeUpgrade qemu-armUpgrade qemu-chardev-spiceUpgrade qemu-s390xUpgrade qemu-block-sshUpgrade qemu-seabiosUpgrade qemu-block-iscsiUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-sdlUpgrade qemu-ivshmem-toolsUpgrade qemu-block-glusterUpgrade qemu-block-rbdUpgrade qemu-ui-spice-appUpgrade qemu-skiboot | Jul 22, 2021 | Jul 15, 2021 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-x86-microvmUpgrade qemu-system-armUpgrade qemu-system-x86-xenUpgrade qemu-system-ppc | Jul 16, 2021 | Jul 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub