An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the read_erst_record() and write_erst_record() functions. Both issues may allow the guest to overrun the host buffer allocated for the ERST memory device. A malicious guest could use these flaws to crash the QEMU process on the host.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-audio-paUpgrade qemu-pr-helperUpgrade qemu-guest-agentUpgrade qemu-imgUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-toolsUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-block-curl | May 15, 2023 | Nov 29, 2022 |
| Centos_linux | — | Upgrade qemu-kvm-ui-openglUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-imgUpgrade qemu-pr-helperUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-coreUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-usb-hostUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-guest-agentUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-block-curl | May 15, 2023 | Nov 29, 2022 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Nov 29, 2022 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 12, 2024 | Nov 29, 2022 |
| Oracle_linux | — | Upgrade qemu-block-iscsiUpgrade nbdkit-example-pluginsUpgrade ruby-hivexUpgrade virt-v2v-man-pages-ukUpgrade qemu-virtiofsdUpgrade nbdkit-tmpdisk-pluginUpgrade perl-hivexUpgrade libvirt-daemon-kvmUpgrade perl-Sys-VirtUpgrade nbdkit-linuxdisk-pluginUpgrade ruby-libguestfsUpgrade nbdkit-curl-pluginUpgrade qemu-system-x86Upgrade libguestfs-javaUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-rsyncUpgrade libguestfs-javadocUpgrade swtpm-tools-pkcs11Upgrade libguestfs-java-develUpgrade nbdkit-gzip-filterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade netcf-libsUpgrade qemu-imgUpgrade nbdfuseUpgrade libguestfs-man-pages-jaUpgrade libguestfs-gobjectUpgrade libguestfs-tools-cUpgrade libiscsiUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-ui-openglUpgrade libguestfs-develUpgrade nbdkit-ssh-pluginUpgrade qemu-kvm-coreUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-pr-helperUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-system-aarch64-coreUpgrade nbdkit-bash-completionUpgrade swtpmUpgrade libvirt-dbusUpgrade swtpm-develUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-secretUpgrade seabios-binUpgrade python3-libvirtUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storageUpgrade hivexUpgrade nbdkitUpgrade libguestfs-gfs2Upgrade virt-dibUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libtpms-develUpgrade libnbd-bash-completionUpgrade hivex-develUpgrade sgabiosUpgrade sgabios-binUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-libsUpgrade netcf-develUpgrade qemu-kvm-docsUpgrade seavgabios-binUpgrade libvirt-wiresharkUpgrade qemu-kvm-toolsUpgrade qemu-system-x86-coreUpgrade nbdkit-serverUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-qemuUpgrade libiscsi-develUpgrade python3-hivexUpgrade libvirt-adminUpgrade libvirt-develUpgrade supermin-develUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvmUpgrade nbdkit-python-pluginUpgrade nbdkit-basic-filtersUpgrade libvirt-nssUpgrade libnbdUpgrade swtpm-libsUpgrade qemu-system-aarch64Upgrade nbdkit-develUpgrade qemu-kvm-audio-paUpgrade nbdkit-xz-filterUpgrade libnbd-develUpgrade libiscsi-utilsUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-tar-pluginUpgrade superminUpgrade libvirt-daemonUpgrade libvirtUpgrade libguestfs-benchmarkingUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-block-glusterUpgrade qemu-commonUpgrade perl-Sys-GuestfsUpgrade nbdkit-vddk-pluginUpgrade nbdkit-tar-filterUpgrade qemu-kvm-block-rbdUpgrade nbdkit-nbd-pluginUpgrade lua-guestfsUpgrade libtpmsUpgrade libguestfs-toolsUpgrade libguestfs-bash-completionUpgrade virt-v2v-bash-completionUpgrade seabiosUpgrade qemu-kvm-block-sshUpgrade netcfUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-xfsUpgrade libvirt-bash-completionUpgrade qemuUpgrade nbdkit-gzip-pluginUpgrade libvirt-daemon-driver-storage-glusterUpgrade virt-v2v-man-pages-jaUpgrade qemu-kvm-device-usb-hostUpgrade qemu-guest-agentUpgrade libguestfs-applianceUpgrade python3-libguestfsUpgrade qemu-block-rbdUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-block-curlUpgrade qemu-block-glusterUpgrade python3-libnbdUpgrade libvirt-clientUpgrade libguestfs-winsupportUpgrade libguestfs-rescueUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-ui-egl-headlessUpgrade libguestfs-inspect-iconsUpgrade ivshmem-toolsUpgrade virt-v2vUpgrade swtpm-tools | Jan 24, 2023 | Oct 19, 2022 |
| Redhat_linux | — | Upgrade qemu-kvm-core-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvmUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-pr-helperUpgrade qemu-guest-agentUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-device-display-virtio-vga-debuginfo | May 15, 2023 | Nov 29, 2022 |
| Suse | — | Upgrade qemu-tools | Jun 13, 2023 | Nov 29, 2022 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-dataUpgrade qemu-kvmUpgrade qemu-system-guiUpgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-commonUpgrade qemu-system-armUpgrade qemu-system-x86-xenUpgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-system (Ubuntu Pro)Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-guest-agentUpgrade qemu (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-common (Ubuntu Pro)Upgrade qemu-system-xenUpgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-common (Ubuntu Pro)Upgrade qemuUpgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-kvm (Ubuntu Pro) | Jun 20, 2023 | Nov 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub