An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the read_erst_record() and write_erst_record() functions. Both issues may allow the guest to overrun the host buffer allocated for the ERST memory device. A malicious guest could use these flaws to crash the QEMU process on the host.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-qemu-guest-agentalma-upgrade-qemu-imgalma-upgrade-qemu-kvmalma-upgrade-qemu-kvm-audio-paalma-upgrade-qemu-kvm-block-curlalma-upgrade-qemu-kvm-block-rbdalma-upgrade-qemu-kvm-commonalma-upgrade-qemu-kvm-corealma-upgrade-qemu-kvm-device-display-virtio-gpualma-upgrade-qemu-kvm-device-display-virtio-gpu-ccwalma-upgrade-qemu-kvm-device-display-virtio-gpu-pcialma-upgrade-qemu-kvm-device-display-virtio-vgaalma-upgrade-qemu-kvm-device-usb-hostalma-upgrade-qemu-kvm-device-usb-redirectalma-upgrade-qemu-kvm-docsalma-upgrade-qemu-kvm-toolsalma-upgrade-qemu-kvm-ui-egl-headlessalma-upgrade-qemu-kvm-ui-openglalma-upgrade-qemu-pr-helper | May 15, 2023 | Nov 29, 2022 | |
| Centos_linux | — | centos-upgrade-qemu-guest-agentcentos-upgrade-qemu-guest-agent-debuginfocentos-upgrade-qemu-imgcentos-upgrade-qemu-img-debuginfocentos-upgrade-qemu-kvmcentos-upgrade-qemu-kvm-audio-pacentos-upgrade-qemu-kvm-audio-pa-debuginfocentos-upgrade-qemu-kvm-block-curlcentos-upgrade-qemu-kvm-block-curl-debuginfocentos-upgrade-qemu-kvm-block-rbdcentos-upgrade-qemu-kvm-block-rbd-debuginfocentos-upgrade-qemu-kvm-commoncentos-upgrade-qemu-kvm-common-debuginfocentos-upgrade-qemu-kvm-corecentos-upgrade-qemu-kvm-core-debuginfocentos-upgrade-qemu-kvm-debuginfocentos-upgrade-qemu-kvm-debugsourcecentos-upgrade-qemu-kvm-device-display-virtio-gpucentos-upgrade-qemu-kvm-device-display-virtio-gpu-debuginfocentos-upgrade-qemu-kvm-device-display-virtio-gpu-pcicentos-upgrade-qemu-kvm-device-display-virtio-gpu-pci-debuginfocentos-upgrade-qemu-kvm-device-display-virtio-vgacentos-upgrade-qemu-kvm-device-display-virtio-vga-debuginfocentos-upgrade-qemu-kvm-device-usb-hostcentos-upgrade-qemu-kvm-device-usb-host-debuginfocentos-upgrade-qemu-kvm-device-usb-redirectcentos-upgrade-qemu-kvm-device-usb-redirect-debuginfocentos-upgrade-qemu-kvm-docscentos-upgrade-qemu-kvm-tests-debuginfocentos-upgrade-qemu-kvm-toolscentos-upgrade-qemu-kvm-tools-debuginfocentos-upgrade-qemu-kvm-ui-egl-headlesscentos-upgrade-qemu-kvm-ui-egl-headless-debuginfocentos-upgrade-qemu-kvm-ui-openglcentos-upgrade-qemu-kvm-ui-opengl-debuginfocentos-upgrade-qemu-pr-helpercentos-upgrade-qemu-pr-helper-debuginfo | May 15, 2023 | Nov 29, 2022 |
| Debian | debian-upgrade-qemu | Jul 30, 2024 | Nov 29, 2022 | |
| Gentoo Linux | gentoo-linux-upgrade-app-emulation-qemu | Aug 12, 2024 | Nov 29, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-hivexoracle-linux-upgrade-hivex-develoracle-linux-upgrade-ivshmem-toolsoracle-linux-upgrade-libguestfsoracle-linux-upgrade-libguestfs-applianceoracle-linux-upgrade-libguestfs-bash-completionoracle-linux-upgrade-libguestfs-benchmarkingoracle-linux-upgrade-libguestfs-develoracle-linux-upgrade-libguestfs-gfs2oracle-linux-upgrade-libguestfs-gobjectoracle-linux-upgrade-libguestfs-gobject-develoracle-linux-upgrade-libguestfs-inspect-iconsoracle-linux-upgrade-libguestfs-javaoracle-linux-upgrade-libguestfs-java-develoracle-linux-upgrade-libguestfs-javadocoracle-linux-upgrade-libguestfs-man-pages-jaoracle-linux-upgrade-libguestfs-man-pages-ukoracle-linux-upgrade-libguestfs-rescueoracle-linux-upgrade-libguestfs-rsyncoracle-linux-upgrade-libguestfs-toolsoracle-linux-upgrade-libguestfs-tools-coracle-linux-upgrade-libguestfs-winsupportoracle-linux-upgrade-libguestfs-xfsoracle-linux-upgrade-libiscsioracle-linux-upgrade-libiscsi-develoracle-linux-upgrade-libiscsi-utilsoracle-linux-upgrade-libnbdoracle-linux-upgrade-libnbd-bash-completionoracle-linux-upgrade-libnbd-develoracle-linux-upgrade-libtpmsoracle-linux-upgrade-libtpms-develoracle-linux-upgrade-libvirtoracle-linux-upgrade-libvirt-adminoracle-linux-upgrade-libvirt-bash-completionoracle-linux-upgrade-libvirt-clientoracle-linux-upgrade-libvirt-daemonoracle-linux-upgrade-libvirt-daemon-config-networkoracle-linux-upgrade-libvirt-daemon-config-nwfilteroracle-linux-upgrade-libvirt-daemon-driver-interfaceoracle-linux-upgrade-libvirt-daemon-driver-networkoracle-linux-upgrade-libvirt-daemon-driver-nodedevoracle-linux-upgrade-libvirt-daemon-driver-nwfilteroracle-linux-upgrade-libvirt-daemon-driver-qemuoracle-linux-upgrade-libvirt-daemon-driver-secretoracle-linux-upgrade-libvirt-daemon-driver-storageoracle-linux-upgrade-libvirt-daemon-driver-storage-coreoracle-linux-upgrade-libvirt-daemon-driver-storage-diskoracle-linux-upgrade-libvirt-daemon-driver-storage-glusteroracle-linux-upgrade-libvirt-daemon-driver-storage-iscsioracle-linux-upgrade-libvirt-daemon-driver-storage-iscsi-directoracle-linux-upgrade-libvirt-daemon-driver-storage-logicaloracle-linux-upgrade-libvirt-daemon-driver-storage-mpathoracle-linux-upgrade-libvirt-daemon-driver-storage-rbdoracle-linux-upgrade-libvirt-daemon-driver-storage-scsioracle-linux-upgrade-libvirt-daemon-kvmoracle-linux-upgrade-libvirt-dbusoracle-linux-upgrade-libvirt-develoracle-linux-upgrade-libvirt-docsoracle-linux-upgrade-libvirt-libsoracle-linux-upgrade-libvirt-lock-sanlockoracle-linux-upgrade-libvirt-nssoracle-linux-upgrade-libvirt-wiresharkoracle-linux-upgrade-lua-guestfsoracle-linux-upgrade-nbdfuseoracle-linux-upgrade-nbdkitoracle-linux-upgrade-nbdkit-bash-completionoracle-linux-upgrade-nbdkit-basic-filtersoracle-linux-upgrade-nbdkit-basic-pluginsoracle-linux-upgrade-nbdkit-curl-pluginoracle-linux-upgrade-nbdkit-develoracle-linux-upgrade-nbdkit-example-pluginsoracle-linux-upgrade-nbdkit-gzip-filteroracle-linux-upgrade-nbdkit-gzip-pluginoracle-linux-upgrade-nbdkit-linuxdisk-pluginoracle-linux-upgrade-nbdkit-nbd-pluginoracle-linux-upgrade-nbdkit-python-pluginoracle-linux-upgrade-nbdkit-serveroracle-linux-upgrade-nbdkit-ssh-pluginoracle-linux-upgrade-nbdkit-tar-filteroracle-linux-upgrade-nbdkit-tar-pluginoracle-linux-upgrade-nbdkit-tmpdisk-pluginoracle-linux-upgrade-nbdkit-vddk-pluginoracle-linux-upgrade-nbdkit-xz-filteroracle-linux-upgrade-netcforacle-linux-upgrade-netcf-develoracle-linux-upgrade-netcf-libsoracle-linux-upgrade-perl-hivexoracle-linux-upgrade-perl-sys-guestfsoracle-linux-upgrade-perl-sys-virtoracle-linux-upgrade-python3-hivexoracle-linux-upgrade-python3-libguestfsoracle-linux-upgrade-python3-libnbdoracle-linux-upgrade-python3-libvirtoracle-linux-upgrade-qemuoracle-linux-upgrade-qemu-block-glusteroracle-linux-upgrade-qemu-block-iscsioracle-linux-upgrade-qemu-block-rbdoracle-linux-upgrade-qemu-commonoracle-linux-upgrade-qemu-guest-agentoracle-linux-upgrade-qemu-imgoracle-linux-upgrade-qemu-kvmoracle-linux-upgrade-qemu-kvm-audio-paoracle-linux-upgrade-qemu-kvm-block-curloracle-linux-upgrade-qemu-kvm-block-glusteroracle-linux-upgrade-qemu-kvm-block-iscsioracle-linux-upgrade-qemu-kvm-block-rbdoracle-linux-upgrade-qemu-kvm-block-sshoracle-linux-upgrade-qemu-kvm-commonoracle-linux-upgrade-qemu-kvm-coreoracle-linux-upgrade-qemu-kvm-device-display-virtio-gpuoracle-linux-upgrade-qemu-kvm-device-display-virtio-gpu-pcioracle-linux-upgrade-qemu-kvm-device-display-virtio-vgaoracle-linux-upgrade-qemu-kvm-device-usb-hostoracle-linux-upgrade-qemu-kvm-device-usb-redirectoracle-linux-upgrade-qemu-kvm-docsoracle-linux-upgrade-qemu-kvm-toolsoracle-linux-upgrade-qemu-kvm-ui-egl-headlessoracle-linux-upgrade-qemu-kvm-ui-opengloracle-linux-upgrade-qemu-pr-helperoracle-linux-upgrade-qemu-system-aarch64oracle-linux-upgrade-qemu-system-aarch64-coreoracle-linux-upgrade-qemu-system-x86oracle-linux-upgrade-qemu-system-x86-coreoracle-linux-upgrade-qemu-virtiofsdoracle-linux-upgrade-ruby-hivexoracle-linux-upgrade-ruby-libguestfsoracle-linux-upgrade-seabiosoracle-linux-upgrade-seabios-binoracle-linux-upgrade-seavgabios-binoracle-linux-upgrade-sgabiosoracle-linux-upgrade-sgabios-binoracle-linux-upgrade-superminoracle-linux-upgrade-supermin-develoracle-linux-upgrade-swtpmoracle-linux-upgrade-swtpm-develoracle-linux-upgrade-swtpm-libsoracle-linux-upgrade-swtpm-toolsoracle-linux-upgrade-swtpm-tools-pkcs11oracle-linux-upgrade-virt-diboracle-linux-upgrade-virt-v2voracle-linux-upgrade-virt-v2v-bash-completionoracle-linux-upgrade-virt-v2v-man-pages-jaoracle-linux-upgrade-virt-v2v-man-pages-uk | Jan 24, 2023 | Oct 19, 2022 |
| Redhat_linux | redhat-upgrade-qemu-guest-agentredhat-upgrade-qemu-guest-agent-debuginforedhat-upgrade-qemu-imgredhat-upgrade-qemu-img-debuginforedhat-upgrade-qemu-kvmredhat-upgrade-qemu-kvm-audio-paredhat-upgrade-qemu-kvm-audio-pa-debuginforedhat-upgrade-qemu-kvm-block-curlredhat-upgrade-qemu-kvm-block-curl-debuginforedhat-upgrade-qemu-kvm-block-rbdredhat-upgrade-qemu-kvm-block-rbd-debuginforedhat-upgrade-qemu-kvm-commonredhat-upgrade-qemu-kvm-common-debuginforedhat-upgrade-qemu-kvm-coreredhat-upgrade-qemu-kvm-core-debuginforedhat-upgrade-qemu-kvm-debuginforedhat-upgrade-qemu-kvm-debugsourceredhat-upgrade-qemu-kvm-device-display-virtio-gpuredhat-upgrade-qemu-kvm-device-display-virtio-gpu-ccwredhat-upgrade-qemu-kvm-device-display-virtio-gpu-ccw-debuginforedhat-upgrade-qemu-kvm-device-display-virtio-gpu-debuginforedhat-upgrade-qemu-kvm-device-display-virtio-gpu-pciredhat-upgrade-qemu-kvm-device-display-virtio-gpu-pci-debuginforedhat-upgrade-qemu-kvm-device-display-virtio-vgaredhat-upgrade-qemu-kvm-device-display-virtio-vga-debuginforedhat-upgrade-qemu-kvm-device-usb-hostredhat-upgrade-qemu-kvm-device-usb-host-debuginforedhat-upgrade-qemu-kvm-device-usb-redirectredhat-upgrade-qemu-kvm-device-usb-redirect-debuginforedhat-upgrade-qemu-kvm-docsredhat-upgrade-qemu-kvm-tests-debuginforedhat-upgrade-qemu-kvm-toolsredhat-upgrade-qemu-kvm-tools-debuginforedhat-upgrade-qemu-kvm-ui-egl-headlessredhat-upgrade-qemu-kvm-ui-egl-headless-debuginforedhat-upgrade-qemu-kvm-ui-openglredhat-upgrade-qemu-kvm-ui-opengl-debuginforedhat-upgrade-qemu-pr-helperredhat-upgrade-qemu-pr-helper-debuginfo | May 15, 2023 | Nov 29, 2022 | |
| Suse | — | suse-upgrade-qemu-tools | Jun 13, 2023 | Nov 29, 2022 |
| Ubuntu | ubuntu-pro-upgrade-qemuubuntu-pro-upgrade-qemu-commonubuntu-pro-upgrade-qemu-guest-agentubuntu-pro-upgrade-qemu-kvmubuntu-pro-upgrade-qemu-systemubuntu-pro-upgrade-qemu-system-aarch64ubuntu-pro-upgrade-qemu-system-armubuntu-pro-upgrade-qemu-system-commonubuntu-pro-upgrade-qemu-system-mipsubuntu-pro-upgrade-qemu-system-miscubuntu-pro-upgrade-qemu-system-ppcubuntu-pro-upgrade-qemu-system-s390xubuntu-pro-upgrade-qemu-system-sparcubuntu-pro-upgrade-qemu-system-x86ubuntu-upgrade-qemuubuntu-upgrade-qemu-guest-agentubuntu-upgrade-qemu-kvmubuntu-upgrade-qemu-systemubuntu-upgrade-qemu-system-armubuntu-upgrade-qemu-system-commonubuntu-upgrade-qemu-system-dataubuntu-upgrade-qemu-system-guiubuntu-upgrade-qemu-system-mipsubuntu-upgrade-qemu-system-miscubuntu-upgrade-qemu-system-ppcubuntu-upgrade-qemu-system-s390xubuntu-upgrade-qemu-system-sparcubuntu-upgrade-qemu-system-x86ubuntu-upgrade-qemu-system-x86-microvmubuntu-upgrade-qemu-system-x86-xenubuntu-upgrade-qemu-system-xen | Jun 20, 2023 | Nov 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub