A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Mar 16, 2023 | Mar 29, 2022 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 12, 2024 | Mar 29, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 10, 2024 | Mar 29, 2022 |
| Oracle_linux | — | Upgrade libvirt-bash-completionUpgrade perl-Sys-VirtUpgrade libvirt-daemon-kvmUpgrade qemu-block-glusterUpgrade qemu-kvm-block-iscsiUpgrade seabios-binUpgrade qemu-commonUpgrade nbdfuseUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-xz-filterUpgrade swtpm-toolsUpgrade libguestfs-toolsUpgrade libnbdUpgrade libguestfs-benchmarkingUpgrade sgabios-binUpgrade libvirt-daemon-driver-secretUpgrade ivshmem-toolsUpgrade virt-v2vUpgrade hivex-develUpgrade nbdkitUpgrade qemu-block-iscsiUpgrade libvirt-adminUpgrade libguestfs-develUpgrade qemuUpgrade libvirt-daemon-driver-nodedevUpgrade libtpmsUpgrade virt-v2v-bash-completionUpgrade nbdkit-serverUpgrade libvirt-lock-sanlockUpgrade nbdkit-bash-completionUpgrade qemu-kvmUpgrade qemu-system-x86-coreUpgrade libguestfs-bash-completionUpgrade libnbd-develUpgrade nbdkit-gzip-pluginUpgrade netcfUpgrade qemu-block-rbdUpgrade libvirt-wiresharkUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-develUpgrade libguestfs-rescueUpgrade libguestfs-rsyncUpgrade libguestfs-winsupportUpgrade libvirt-daemonUpgrade nbdkit-vddk-pluginUpgrade nbdkit-nbd-pluginUpgrade nbdkit-example-pluginsUpgrade libguestfs-tools-cUpgrade python3-libguestfsUpgrade python3-hivexUpgrade qemu-guest-agentUpgrade libguestfs-man-pages-ukUpgrade netcf-libsUpgrade libguestfs-xfsUpgrade qemu-kvm-block-curlUpgrade virt-v2v-man-pages-jaUpgrade virt-v2v-man-pages-ukUpgrade libvirt-daemon-config-networkUpgrade libvirt-dbusUpgrade libiscsi-utilsUpgrade nbdkit-tar-pluginUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade nbdkit-curl-pluginUpgrade libvirt-daemon-driver-storage-mpathUpgrade swtpmUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-rbdUpgrade nbdkit-basic-filtersUpgrade nbdkit-python-pluginUpgrade libvirt-nssUpgrade libguestfsUpgrade hivexUpgrade libguestfs-gobjectUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-interfaceUpgrade swtpm-tools-pkcs11Upgrade swtpm-develUpgrade libvirt-libsUpgrade ruby-hivexUpgrade qemu-virtiofsdUpgrade python3-libnbdUpgrade nbdkit-gzip-filterUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirtUpgrade seabiosUpgrade qemu-system-aarch64-coreUpgrade python3-libvirtUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-clientUpgrade libguestfs-javadocUpgrade sgabiosUpgrade qemu-kvm-block-sshUpgrade libtpms-develUpgrade qemu-imgUpgrade libguestfs-javaUpgrade qemu-kvm-coreUpgrade perl-hivexUpgrade virt-dibUpgrade superminUpgrade nbdkit-basic-pluginsUpgrade seavgabios-binUpgrade nbdkit-tar-filterUpgrade libguestfs-applianceUpgrade supermin-develUpgrade libnbd-bash-completionUpgrade nbdkit-linuxdisk-pluginUpgrade swtpm-libsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storageUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade libiscsi-develUpgrade nbdkit-develUpgrade ruby-libguestfsUpgrade perl-Sys-GuestfsUpgrade netcf-develUpgrade nbdkit-ssh-pluginUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-nwfilterUpgrade libiscsiUpgrade libguestfs-java-devel | Jan 24, 2023 | Mar 21, 2022 |
| Suse | — | Upgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-vgaUpgrade qemuUpgrade qemu-hw-usb-hostUpgrade qemu-ipxeUpgrade qemu-SLOFUpgrade qemu-audio-ossUpgrade qemu-ppcUpgrade qemu-block-rbdUpgrade qemu-ui-sdlUpgrade qemu-toolsUpgrade qemu-linux-userUpgrade qemu-ivshmem-toolsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390xUpgrade qemu-block-nfsUpgrade qemu-hw-display-qxlUpgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade qemu-ui-openglUpgrade qemu-armUpgrade qemu-block-glusterUpgrade qemu-x86Upgrade qemu-block-sshUpgrade qemu-audio-paUpgrade qemu-hw-usb-smartcardUpgrade qemu-block-iscsiUpgrade qemu-accel-qtestUpgrade qemu-accel-tcg-x86Upgrade qemu-block-curlUpgrade qemu-vhost-user-gpuUpgrade qemu-chardev-baumUpgrade qemu-guest-agentUpgrade qemu-langUpgrade qemu-seabiosUpgrade qemu-skibootUpgrade qemu-ksmUpgrade qemu-audio-jackUpgrade qemu-block-dmgUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-appUpgrade qemu-ui-cursesUpgrade qemu-testsuiteUpgrade qemu-ui-spice-coreUpgrade qemu-hw-usb-redirectUpgrade qemu-s390Upgrade qemu-kvmUpgrade qemu-extraUpgrade qemu-audio-sdlUpgrade qemu-chardev-spiceUpgrade qemu-audio-alsaUpgrade qemu-microvm | Mar 9, 2023 | Mar 29, 2022 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-dataUpgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-xenUpgrade qemuUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-system-commonUpgrade qemu-system-guiUpgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-x86-xenUpgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-guest-agentUpgrade qemu-kvm (Ubuntu Pro) | Jun 20, 2023 | Mar 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub