An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest due to improper input validation. This flaw allows a privileged guest user to make QEMU allocate a large amount of memory, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Sep 6, 2022 | Feb 24, 2022 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | Feb 24, 2022 |
| Oracle_linux | — | Upgrade python3-libnbdUpgrade lua-guestfsUpgrade nbdkit-python-pluginUpgrade qemu-imgUpgrade nbdkit-develUpgrade nbdkit-linuxdisk-pluginUpgrade qemu-system-aarch64Upgrade libvirt-daemon-driver-qemuUpgrade nbdkit-vddk-pluginUpgrade qemu-kvm-block-rbdUpgrade python3-libguestfsUpgrade qemu-kvm-block-sshUpgrade python3-hivexUpgrade superminUpgrade libvirt-daemon-driver-nodedevUpgrade qemuUpgrade nbdkit-serverUpgrade seabiosUpgrade seavgabios-binUpgrade libvirt-nssUpgrade netcf-develUpgrade libvirt-lock-sanlockUpgrade qemu-block-glusterUpgrade perl-hivexUpgrade qemu-system-x86-coreUpgrade ruby-hivexUpgrade qemu-commonUpgrade libvirt-daemon-driver-storage-coreUpgrade perl-Sys-GuestfsUpgrade libiscsiUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-gzip-pluginUpgrade sgabiosUpgrade nbdkit-basic-filtersUpgrade libvirt-bash-completionUpgrade libvirt-docsUpgrade libguestfs-bash-completionUpgrade nbdkit-curl-pluginUpgrade libguestfs-rescueUpgrade ruby-libguestfsUpgrade qemu-kvm-coreUpgrade hivexUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-libsUpgrade libvirtUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-config-nwfilterUpgrade libnbdUpgrade libvirt-daemonUpgrade libguestfs-rsyncUpgrade libiscsi-develUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-networkUpgrade libguestfs-xfsUpgrade libguestfs-gobject-develUpgrade python3-libvirtUpgrade hivex-develUpgrade nbdkit-xz-filterUpgrade qemu-kvm-block-curlUpgrade nbdfuseUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-secretUpgrade virt-dibUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libguestfs-develUpgrade libguestfs-man-pages-ukUpgrade qemu-system-x86Upgrade virt-v2vUpgrade qemu-kvm-commonUpgrade qemu-guest-agentUpgrade nbdkitUpgrade libiscsi-utilsUpgrade libguestfs-man-pages-jaUpgrade libguestfs-javadocUpgrade libguestfs-java-develUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-clientUpgrade libguestfs-winsupportUpgrade libguestfs-gfs2Upgrade qemu-system-aarch64-coreUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-adminUpgrade supermin-develUpgrade libvirt-dbusUpgrade libnbd-develUpgrade libguestfs-toolsUpgrade libguestfsUpgrade seabios-binUpgrade libguestfs-javaUpgrade libguestfs-benchmarkingUpgrade qemu-block-iscsiUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storageUpgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade perl-Sys-VirtUpgrade netcfUpgrade nbdkit-ssh-pluginUpgrade nbdkit-example-pluginsUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-kvm | Aug 17, 2021 | Jun 17, 2021 |
| Suse | — | Upgrade qemu-s390Upgrade qemu-toolsUpgrade qemu-hw-usb-smartcardUpgrade qemu-microvmUpgrade qemu-accel-tcg-x86Upgrade qemu-vgabiosUpgrade qemu-audio-paUpgrade qemu-audio-alsaUpgrade qemu-kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-extraUpgrade qemu-hw-usb-redirectUpgrade qemu-chardev-baumUpgrade qemu-ui-cursesUpgrade qemu-ppcUpgrade qemu-sgabiosUpgrade qemu-linux-userUpgrade qemu-ui-gtkUpgrade qemu-x86Upgrade qemu-block-curlUpgrade qemu-vhost-user-gpuUpgrade qemu-block-nfsUpgrade qemu-hw-usb-hostUpgrade qemu-ipxeUpgrade qemu-langUpgrade qemu-slofUpgrade qemu-block-glusterUpgrade qemuUpgrade qemu-ui-spice-appUpgrade qemu-block-iscsiUpgrade qemu-skibootUpgrade qemu-ksmUpgrade qemu-armUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-ossUpgrade qemu-audio-spiceUpgrade qemu-guest-agentUpgrade qemu-hw-display-qxlUpgrade qemu-testsuiteUpgrade qemu-block-dmgUpgrade qemu-s390xUpgrade qemu-chardev-spiceUpgrade qemu-ui-openglUpgrade qemu-ivshmem-toolsUpgrade qemu-block-rbdUpgrade qemu-ui-sdlUpgrade qemu-seabiosUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-sdlUpgrade qemu-ui-spice-core | Jul 22, 2021 | Jul 15, 2021 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-x86-xenUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-x86-microvmUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-misc | Jul 16, 2021 | Jul 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub