An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the read_erst_record() and write_erst_record() functions. Both issues may allow the guest to overrun the host buffer allocated for the ERST memory device. A malicious guest could use these flaws to crash the QEMU process on the host.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-docsUpgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-toolsUpgrade qemu-guest-agentUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-coreUpgrade qemu-pr-helperUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-display-virtio-gpu-pci | May 15, 2023 | Nov 29, 2022 |
| Centos_linux | — | Upgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-guest-agentUpgrade qemu-img-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-pr-helperUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-usb-hostUpgrade qemu-imgUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-ui-opengl | May 15, 2023 | Nov 29, 2022 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Nov 29, 2022 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 12, 2024 | Nov 29, 2022 |
| Oracle_linux | — | Upgrade qemu-pr-helperUpgrade swtpm-develUpgrade qemu-imgUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade nbdkit-linuxdisk-pluginUpgrade qemu-kvm-ui-openglUpgrade qemu-block-iscsiUpgrade nbdkit-curl-pluginUpgrade nbdkit-gzip-filterUpgrade qemu-system-x86Upgrade nbdkit-basic-pluginsUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-logicalUpgrade hivexUpgrade swtpmUpgrade qemu-kvm-commonUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-config-nwfilterUpgrade perl-hivexUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-diskUpgrade perl-Sys-VirtUpgrade qemu-kvm-block-iscsiUpgrade swtpm-tools-pkcs11Upgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-dbusUpgrade libvirt-docsUpgrade ruby-hivexUpgrade nbdkit-bash-completionUpgrade netcf-libsUpgrade virt-dibUpgrade nbdkit-ssh-pluginUpgrade nbdfuseUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-interfaceUpgrade sgabios-binUpgrade libguestfs-javaUpgrade virt-v2v-man-pages-ukUpgrade qemu-virtiofsdUpgrade seavgabios-binUpgrade sgabiosUpgrade qemu-kvm-docsUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-libsUpgrade python3-libvirtUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-tmpdisk-pluginUpgrade libguestfs-javadocUpgrade nbdkitUpgrade hivex-develUpgrade libnbd-bash-completionUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-gfs2Upgrade libguestfsUpgrade libguestfs-man-pages-jaUpgrade libtpms-develUpgrade libguestfs-tools-cUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-java-develUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64-coreUpgrade seabios-binUpgrade qemu-kvm-audio-paUpgrade libguestfs-applianceUpgrade nbdkit-vddk-pluginUpgrade nbdkit-python-pluginUpgrade qemu-kvm-ui-egl-headlessUpgrade libguestfs-xfsUpgrade qemu-system-aarch64Upgrade qemu-kvm-device-display-virtio-vgaUpgrade swtpm-libsUpgrade netcfUpgrade qemu-kvmUpgrade python3-libnbdUpgrade libvirt-clientUpgrade libguestfs-winsupportUpgrade libguestfs-rescueUpgrade libguestfs-man-pages-ukUpgrade ivshmem-toolsUpgrade virt-v2vUpgrade swtpm-toolsUpgrade qemu-system-x86-coreUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-block-curlUpgrade libguestfs-inspect-iconsUpgrade qemu-block-glusterUpgrade qemu-kvm-block-rbdUpgrade nbdkit-nbd-pluginUpgrade lua-guestfsUpgrade libvirt-lock-sanlockUpgrade libtpmsUpgrade libguestfs-bash-completionUpgrade libguestfs-toolsUpgrade nbdkit-tar-pluginUpgrade nbdkit-develUpgrade libvirt-daemon-driver-nodedevUpgrade libiscsi-utilsUpgrade libguestfs-gobject-develUpgrade nbdkit-xz-filterUpgrade seabiosUpgrade qemu-kvm-block-sshUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-networkUpgrade libiscsi-develUpgrade libvirt-daemon-driver-qemuUpgrade virt-v2v-bash-completionUpgrade libnbd-develUpgrade libnbdUpgrade supermin-develUpgrade nbdkit-serverUpgrade libvirt-daemon-driver-storage-coreUpgrade python3-hivexUpgrade qemu-kvm-device-usb-hostUpgrade qemu-block-rbdUpgrade qemuUpgrade nbdkit-gzip-pluginUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-bash-completionUpgrade libvirt-adminUpgrade virt-v2v-man-pages-jaUpgrade qemu-guest-agentUpgrade nbdkit-tar-filterUpgrade libvirt-nssUpgrade nbdkit-basic-filtersUpgrade superminUpgrade libvirt-daemonUpgrade libvirtUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-toolsUpgrade libvirt-wiresharkUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-block-glusterUpgrade qemu-commonUpgrade perl-Sys-Guestfs | Jan 24, 2023 | Oct 19, 2022 |
| Redhat_linux | — | Upgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-docsUpgrade qemu-img-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-pr-helperUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-coreUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-ui-opengl | May 15, 2023 | Nov 29, 2022 |
| Suse | — | Upgrade qemu-tools | Jun 13, 2023 | Nov 29, 2022 |
| Ubuntu | — | Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-system-x86-xenUpgrade qemu-system-commonUpgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-guest-agentUpgrade qemu-system-armUpgrade qemu-kvmUpgrade qemu-system-guiUpgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-dataUpgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-common (Ubuntu Pro)Upgrade qemuUpgrade qemu-system-ppcUpgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-xen | Jun 20, 2023 | Nov 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub