An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Nov 4, 2022 | Mar 3, 2022 |
| Oracle_linux | — | Upgrade virt-v2v-man-pages-jaUpgrade libguestfs-winsupportUpgrade libguestfs-xfsUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-networkUpgrade python3-libnbdUpgrade libguestfs-inspect-iconsUpgrade lua-guestfsUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-vddk-pluginUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-glusterUpgrade ivshmem-toolsUpgrade libtpmsUpgrade perl-Sys-GuestfsUpgrade qemuUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvmUpgrade libvirt-nssUpgrade swtpm-toolsUpgrade libvirt-lock-sanlockUpgrade qemu-block-rbdUpgrade libguestfs-toolsUpgrade libnbd-develUpgrade libguestfs-bash-completionUpgrade libvirtUpgrade libiscsi-utilsUpgrade nbdkit-xz-filterUpgrade nbdkit-tar-filterUpgrade seabiosUpgrade qemu-kvm-block-rbdUpgrade libiscsi-develUpgrade qemu-system-aarch64Upgrade nbdkit-serverUpgrade python3-libguestfsUpgrade qemu-guest-agentUpgrade swtpm-libsUpgrade sgabiosUpgrade seavgabios-binUpgrade libguestfs-applianceUpgrade nbdkit-python-pluginUpgrade libvirt-daemon-driver-nodedevUpgrade ruby-libguestfsUpgrade nbdkit-tar-pluginUpgrade libvirt-clientUpgrade supermin-develUpgrade nbdkit-gzip-pluginUpgrade libvirt-bash-completionUpgrade libguestfs-rescueUpgrade superminUpgrade nbdkit-basic-filtersUpgrade qemu-commonUpgrade libvirt-daemonUpgrade virt-v2vUpgrade python3-hivexUpgrade netcf-develUpgrade nbdkit-basic-pluginsUpgrade qemu-system-x86-coreUpgrade hivexUpgrade qemu-kvm-block-sshUpgrade nbdkit-develUpgrade qemu-block-glusterUpgrade virt-v2v-bash-completionUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-man-pages-ukUpgrade libvirt-develUpgrade nbdkitUpgrade seabios-binUpgrade libiscsiUpgrade swtpmUpgrade nbdkit-bash-completionUpgrade ruby-hivexUpgrade nbdkit-nbd-pluginUpgrade swtpm-develUpgrade nbdkit-curl-pluginUpgrade qemu-imgUpgrade sgabios-binUpgrade qemu-virtiofsdUpgrade qemu-kvm-coreUpgrade netcf-libsUpgrade nbdkit-tmpdisk-pluginUpgrade nbdkit-example-pluginsUpgrade nbdfuseUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-interfaceUpgrade libnbdUpgrade hivex-develUpgrade libvirt-daemon-driver-storage-iscsiUpgrade python3-libvirtUpgrade perl-Sys-VirtUpgrade libvirt-dbusUpgrade libnbd-bash-completionUpgrade libguestfs-tools-cUpgrade libguestfs-man-pages-jaUpgrade libguestfs-javaUpgrade libguestfs-develUpgrade libguestfsUpgrade qemu-system-x86Upgrade libvirt-daemon-driver-storage-diskUpgrade virt-dibUpgrade nbdkit-ssh-pluginUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nwfilterUpgrade libtpms-develUpgrade qemu-system-aarch64-coreUpgrade libvirt-docsUpgrade libvirt-daemon-config-nwfilterUpgrade swtpm-tools-pkcs11Upgrade libguestfs-rsyncUpgrade libvirt-daemon-config-networkUpgrade netcfUpgrade libguestfs-gfs2Upgrade virt-v2v-man-pages-ukUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-secretUpgrade libvirt-wiresharkUpgrade libguestfs-gobjectUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade nbdkit-gzip-filterUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-java-develUpgrade qemu-kvm-block-iscsiUpgrade qemu-block-iscsiUpgrade nbdkit-linuxdisk-pluginUpgrade libvirt-adminUpgrade perl-hivex | Jan 24, 2023 | Jul 7, 2021 |
| Suse | — | Upgrade qemu-audio-paUpgrade qemu-block-dmgUpgrade qemu-accel-qtestUpgrade qemu-audio-alsaUpgrade qemu-extraUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-armUpgrade qemu-hw-usb-hostUpgrade qemu-microvmUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-skibootUpgrade qemu-block-curlUpgrade qemu-ui-cursesUpgrade qemu-s390Upgrade qemu-seabiosUpgrade qemu-ksmUpgrade qemu-ivshmem-toolsUpgrade qemu-ui-openglUpgrade qemu-x86Upgrade qemu-ui-gtkUpgrade qemu-block-glusterUpgrade qemu-langUpgrade qemu-chardev-spiceUpgrade qemu-slofUpgrade qemu-kvmUpgrade qemu-ppcUpgrade qemu-ipxeUpgrade qemu-accel-tcg-x86Upgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemuUpgrade qemu-hw-usb-smartcardUpgrade qemu-block-rbdUpgrade qemu-s390xUpgrade qemu-audio-spiceUpgrade qemu-ui-spice-coreUpgrade qemu-vhost-user-gpuUpgrade qemu-ui-spice-appUpgrade qemu-guest-agentUpgrade qemu-vgabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-qxlUpgrade qemu-chardev-baumUpgrade qemu-block-iscsiUpgrade qemu-block-sshUpgrade qemu-audio-jackUpgrade qemu-audio-dbusUpgrade qemu-block-nfsUpgrade qemu-ui-dbusUpgrade qemu-tools | Aug 9, 2024 | Mar 3, 2022 |
| Ubuntu | — | Upgrade qemu-system-x86-microvmUpgrade qemu-system-miscUpgrade qemuUpgrade qemu-system-x86Upgrade qemu-system-x86-xenUpgrade qemu-systemUpgrade qemu-system-xenUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-sparcUpgrade qemu-system-mips | Jan 9, 2024 | Mar 3, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub