A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Mar 16, 2023 | Mar 29, 2022 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 12, 2024 | Mar 29, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 10, 2024 | Mar 29, 2022 |
| Oracle_linux | — | Upgrade libguestfs-winsupportUpgrade qemu-guest-agentUpgrade virt-v2v-man-pages-jaUpgrade nbdkit-curl-pluginUpgrade libvirt-dbusUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-kvm-block-curlUpgrade python3-hivexUpgrade virt-v2v-man-pages-ukUpgrade libvirt-daemon-config-networkUpgrade nbdkit-nbd-pluginUpgrade nbdkit-tar-pluginUpgrade libguestfs-man-pages-ukUpgrade libguestfs-xfsUpgrade netcf-libsUpgrade python3-libguestfsUpgrade libvirt-daemon-kvmUpgrade libguestfs-gobject-develUpgrade libvirt-develUpgrade nbdkit-vddk-pluginUpgrade libguestfs-rsyncUpgrade qemu-block-glusterUpgrade swtpm-toolsUpgrade ivshmem-toolsUpgrade nbdkit-xz-filterUpgrade qemu-kvm-block-iscsiUpgrade perl-Sys-VirtUpgrade libguestfs-rescueUpgrade seabios-binUpgrade qemu-commonUpgrade nbdkit-example-pluginsUpgrade virt-v2vUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-wiresharkUpgrade netcfUpgrade libvirt-lock-sanlockUpgrade nbdkit-serverUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvmUpgrade libguestfs-tools-cUpgrade libvirt-bash-completionUpgrade libvirt-daemonUpgrade qemu-system-x86-coreUpgrade nbdkit-bash-completionUpgrade nbdfuseUpgrade nbdkit-gzip-pluginUpgrade hivex-develUpgrade libnbdUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-man-pages-jaUpgrade libnbd-develUpgrade sgabios-binUpgrade qemu-block-rbdUpgrade qemuUpgrade libtpmsUpgrade libguestfs-benchmarkingUpgrade libguestfs-toolsUpgrade libvirt-adminUpgrade qemu-block-iscsiUpgrade libguestfs-develUpgrade nbdkitUpgrade virt-v2v-bash-completionUpgrade libguestfs-bash-completionUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-config-nwfilterUpgrade sgabiosUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade swtpm-develUpgrade perl-Sys-GuestfsUpgrade nbdkit-basic-filtersUpgrade libguestfs-inspect-iconsUpgrade libnbd-bash-completionUpgrade supermin-develUpgrade nbdkit-tmpdisk-pluginUpgrade libiscsi-develUpgrade nbdkit-develUpgrade ruby-libguestfsUpgrade libvirt-libsUpgrade swtpmUpgrade nbdkit-ssh-pluginUpgrade qemu-system-aarch64Upgrade qemu-kvm-coreUpgrade nbdkit-linuxdisk-pluginUpgrade libvirt-daemon-driver-storageUpgrade hivexUpgrade qemu-imgUpgrade python3-libvirtUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-system-aarch64-coreUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-clientUpgrade libguestfs-javadocUpgrade ruby-hivexUpgrade nbdkit-gzip-filterUpgrade superminUpgrade seavgabios-binUpgrade perl-hivexUpgrade nbdkit-tar-filterUpgrade nbdkit-basic-pluginsUpgrade libvirtUpgrade libguestfs-gobjectUpgrade libguestfs-applianceUpgrade virt-dibUpgrade libvirt-daemon-driver-qemuUpgrade seabiosUpgrade netcf-develUpgrade qemu-virtiofsdUpgrade python3-libnbdUpgrade qemu-kvm-block-sshUpgrade nbdkit-python-pluginUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libtpms-develUpgrade libguestfs-javaUpgrade libguestfs-gfs2Upgrade libguestfsUpgrade swtpm-libsUpgrade qemu-system-x86Upgrade libvirt-nssUpgrade qemu-kvm-block-glusterUpgrade swtpm-tools-pkcs11Upgrade libvirt-daemon-driver-interfaceUpgrade libiscsi | Jan 24, 2023 | Mar 21, 2022 |
| Suse | — | Upgrade qemu-hw-usb-smartcardUpgrade qemu-ui-spice-coreUpgrade qemu-audio-jackUpgrade qemu-audio-sdlUpgrade qemu-ui-gtkUpgrade qemu-extraUpgrade qemu-skibootUpgrade qemu-ui-cursesUpgrade qemu-block-dmgUpgrade qemu-langUpgrade qemu-accel-qtestUpgrade qemu-microvmUpgrade qemu-ksmUpgrade qemu-vhost-user-gpuUpgrade qemu-testsuiteUpgrade qemu-audio-alsaUpgrade qemu-block-sshUpgrade qemu-chardev-spiceUpgrade qemu-seabiosUpgrade qemu-chardev-baumUpgrade qemu-guest-agentUpgrade qemu-accel-tcg-x86Upgrade qemu-s390Upgrade qemu-kvmUpgrade qemu-ui-spice-appUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-paUpgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-spiceUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-hw-usb-hostUpgrade qemu-ppcUpgrade qemu-ivshmem-toolsUpgrade qemu-ui-sdlUpgrade qemu-s390xUpgrade qemu-ui-openglUpgrade qemu-block-nfsUpgrade qemu-vgabiosUpgrade qemu-hw-display-qxlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-glusterUpgrade qemu-sgabiosUpgrade qemu-linux-userUpgrade qemu-x86Upgrade qemu-armUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-SLOFUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ipxe | Mar 9, 2023 | Mar 29, 2022 |
| Ubuntu | — | Upgrade qemu-system-xenUpgrade qemu-system-commonUpgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-system-guiUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-dataUpgrade qemuUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-guest-agentUpgrade qemu-system-x86-microvmUpgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-system-x86-xenUpgrade qemu-system-arm (Ubuntu Pro) | Jun 20, 2023 | Mar 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub