A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue occurs while handling a "PVRDMA_REG_DSRHIGH" write from the guest and may result in a crash of QEMU or cause undefined behavior due to the access of an uninitialized pointer. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Sep 6, 2022 | Feb 24, 2022 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | Feb 24, 2022 |
| Oracle_linux | — | Upgrade nbdkit-basic-filtersUpgrade libvirtUpgrade libvirt-daemon-config-networkUpgrade libguestfs-javadocUpgrade seabios-binUpgrade libguestfs-benchmarkingUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-block-glusterUpgrade seavgabios-binUpgrade supermin-develUpgrade libguestfs-inspect-iconsUpgrade libguestfs-winsupportUpgrade libvirt-bash-completionUpgrade netcf-develUpgrade qemu-kvm-coreUpgrade hivex-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-develUpgrade hivexUpgrade libiscsi-develUpgrade libnbd-develUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade nbdkit-linuxdisk-pluginUpgrade python3-libnbdUpgrade nbdkit-ssh-pluginUpgrade libvirt-clientUpgrade netcf-libsUpgrade perl-Sys-GuestfsUpgrade nbdkit-xz-filterUpgrade perl-hivexUpgrade qemu-imgUpgrade seabiosUpgrade qemu-system-x86-coreUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nwfilterUpgrade lua-guestfsUpgrade libguestfsUpgrade ruby-hivexUpgrade qemu-commonUpgrade libvirt-daemon-kvmUpgrade nbdkit-basic-pluginsUpgrade python3-libvirtUpgrade python3-libguestfsUpgrade python3-hivexUpgrade qemu-system-aarch64Upgrade libvirt-daemon-driver-interfaceUpgrade libvirt-docsUpgrade libvirt-nssUpgrade qemuUpgrade ruby-libguestfsUpgrade virt-v2vUpgrade libguestfs-rescueUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-bash-completionUpgrade libvirt-lock-sanlockUpgrade qemu-kvm-block-sshUpgrade nbdfuseUpgrade qemu-kvm-block-curlUpgrade libvirt-dbusUpgrade libguestfs-man-pages-ukUpgrade libguestfs-man-pages-jaUpgrade qemu-system-x86Upgrade libvirt-daemon-driver-storage-iscsi-directUpgrade nbdkit-example-pluginsUpgrade libguestfs-xfsUpgrade libguestfs-gobjectUpgrade qemu-block-iscsiUpgrade qemu-kvm-block-rbdUpgrade perl-Sys-VirtUpgrade netcfUpgrade nbdkit-serverUpgrade nbdkit-curl-pluginUpgrade libvirt-daemon-driver-storage-logicalUpgrade virt-dibUpgrade qemu-block-glusterUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-config-nwfilterUpgrade libnbdUpgrade libguestfs-javaUpgrade superminUpgrade nbdkit-gzip-pluginUpgrade libvirt-develUpgrade libvirt-adminUpgrade qemu-kvm-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade sgabios-binUpgrade nbdkit-vddk-pluginUpgrade libvirt-libsUpgrade libguestfs-toolsUpgrade libguestfs-develUpgrade libguestfs-tools-cUpgrade libguestfs-java-develUpgrade nbdkit-python-pluginUpgrade nbdkitUpgrade libguestfs-rsyncUpgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storageUpgrade sgabiosUpgrade nbdkit-bash-completionUpgrade qemu-guest-agentUpgrade libguestfs-gfs2 | Aug 17, 2021 | Jun 17, 2021 |
| Suse | — | Upgrade qemu-ivshmem-toolsUpgrade qemu-block-sshUpgrade qemu-block-nfsUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-rbdUpgrade qemu-hw-display-qxlUpgrade qemu-langUpgrade qemu-armUpgrade qemu-ui-openglUpgrade qemu-ipxeUpgrade qemuUpgrade qemu-s390xUpgrade qemu-audio-ossUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-iscsiUpgrade qemu-vhost-user-gpuUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-spiceUpgrade qemu-seabiosUpgrade qemu-audio-sdlUpgrade qemu-extraUpgrade qemu-ui-spice-appUpgrade qemu-ui-sdlUpgrade qemu-chardev-spiceUpgrade qemu-guest-agentUpgrade qemu-skibootUpgrade qemu-ui-cursesUpgrade qemu-hw-usb-smartcardUpgrade qemu-kvmUpgrade qemu-microvmUpgrade qemu-hw-usb-hostUpgrade qemu-accel-tcg-x86Upgrade qemu-audio-alsaUpgrade qemu-block-glusterUpgrade qemu-block-curlUpgrade qemu-linux-userUpgrade qemu-ui-spice-coreUpgrade qemu-hw-usb-redirectUpgrade qemu-SLOFUpgrade qemu-s390Upgrade qemu-vgabiosUpgrade qemu-testsuiteUpgrade qemu-ksmUpgrade qemu-chardev-baumUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-x86Upgrade qemu-ppcUpgrade qemu-block-dmgUpgrade qemu-toolsUpgrade qemu-sgabiosUpgrade qemu-ui-gtkUpgrade qemu-audio-pa | Jul 22, 2021 | Jul 15, 2021 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-armUpgrade qemu-system-x86-xenUpgrade qemu-systemUpgrade qemu-system-x86-microvmUpgrade qemu-system-s390x | Jul 16, 2021 | Jul 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub