An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the read_erst_record() and write_erst_record() functions. Both issues may allow the guest to overrun the host buffer allocated for the ERST memory device. A malicious guest could use these flaws to crash the QEMU process on the host.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-commonUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvmUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-usb-hostUpgrade qemu-guest-agentUpgrade qemu-imgUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-toolsUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-audio-paUpgrade qemu-pr-helperUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-core | May 15, 2023 | Nov 29, 2022 |
| Centos_linux | — | Upgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-ui-openglUpgrade qemu-pr-helperUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-coreUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvmUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfo | May 15, 2023 | Nov 29, 2022 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Nov 29, 2022 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 12, 2024 | Nov 29, 2022 |
| Oracle_linux | — | Upgrade virt-v2v-man-pages-jaUpgrade libvirt-wiresharkUpgrade nbdkit-gzip-pluginUpgrade libguestfs-toolsUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-block-rbdUpgrade nbdkit-develUpgrade libtpmsUpgrade nbdkit-xz-filterUpgrade libnbd-develUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-lock-sanlockUpgrade nbdkit-tar-pluginUpgrade libguestfs-bash-completionUpgrade libguestfs-gobject-develUpgrade lua-guestfsUpgrade libiscsi-utilsUpgrade nbdkit-nbd-pluginUpgrade libguestfs-xfsUpgrade netcfUpgrade python3-libguestfsUpgrade qemu-kvm-block-sshUpgrade swtpm-libsUpgrade libiscsi-develUpgrade supermin-develUpgrade libvirt-daemon-driver-networkUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade libvirt-daemon-driver-qemuUpgrade seabiosUpgrade libnbdUpgrade qemu-kvm-device-display-virtio-vgaUpgrade libvirt-nssUpgrade qemu-kvm-block-curlUpgrade libvirt-adminUpgrade virt-v2v-bash-completionUpgrade nbdkit-basic-filtersUpgrade qemuUpgrade qemu-block-rbdUpgrade libguestfs-applianceUpgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade nbdkit-python-pluginUpgrade nbdkit-vddk-pluginUpgrade qemu-kvm-device-usb-hostUpgrade superminUpgrade libvirt-bash-completionUpgrade perl-Sys-GuestfsUpgrade qemu-commonUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-config-networkUpgrade qemu-block-glusterUpgrade libvirtUpgrade libvirt-clientUpgrade python3-libnbdUpgrade libvirt-daemonUpgrade libvirt-develUpgrade swtpm-toolsUpgrade virt-v2vUpgrade qemu-system-x86-coreUpgrade ivshmem-toolsUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-device-usb-redirectUpgrade libguestfs-inspect-iconsUpgrade libguestfs-rescueUpgrade libguestfs-benchmarkingUpgrade nbdkit-serverUpgrade libguestfs-winsupportUpgrade qemu-kvm-ui-egl-headlessUpgrade nbdkit-tar-filterUpgrade python3-hivexUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-rbdUpgrade swtpmUpgrade nbdkit-bash-completionUpgrade swtpm-develUpgrade hivexUpgrade libguestfs-gfs2Upgrade libvirt-dbusUpgrade qemu-pr-helperUpgrade nbdkit-basic-pluginsUpgrade nbdkit-tmpdisk-pluginUpgrade virt-v2v-man-pages-ukUpgrade ruby-hivexUpgrade qemu-virtiofsdUpgrade perl-Sys-VirtUpgrade nbdkitUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-javaUpgrade libguestfs-develUpgrade virt-dibUpgrade seabios-binUpgrade qemu-system-aarch64-coreUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libiscsiUpgrade netcf-libsUpgrade libguestfsUpgrade libguestfs-man-pages-jaUpgrade libguestfs-java-develUpgrade libguestfs-tools-cUpgrade qemu-system-x86Upgrade ruby-libguestfsUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-commonUpgrade nbdkit-linuxdisk-pluginUpgrade nbdkit-gzip-filterUpgrade qemu-imgUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdfuseUpgrade qemu-block-iscsiUpgrade perl-hivexUpgrade hivex-develUpgrade qemu-kvm-docsUpgrade sgabiosUpgrade seavgabios-binUpgrade netcf-develUpgrade libvirt-libsUpgrade libvirt-daemon-driver-nwfilterUpgrade libtpms-develUpgrade sgabios-binUpgrade libguestfs-javadocUpgrade python3-libvirtUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-config-nwfilterUpgrade swtpm-tools-pkcs11Upgrade qemu-kvm-block-iscsiUpgrade nbdkit-ssh-pluginUpgrade nbdkit-curl-pluginUpgrade libnbd-bash-completionUpgrade libvirt-docs | Jan 24, 2023 | Oct 19, 2022 |
| Redhat_linux | — | Upgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-coreUpgrade qemu-kvm-toolsUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-imgUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-pr-helperUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-pr-helper-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-kvm-docsUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-display-virtio-gpu | May 15, 2023 | Nov 29, 2022 |
| Suse | — | Upgrade qemu-tools | Jun 13, 2023 | Nov 29, 2022 |
| Ubuntu | — | Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-dataUpgrade qemu-system-guiUpgrade qemu-system-armUpgrade qemu-system (Ubuntu Pro)Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-x86-xenUpgrade qemu-system-s390xUpgrade qemu-system-x86-microvmUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-system-commonUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-xenUpgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemuUpgrade qemu-system-ppcUpgrade qemu-system | Jun 20, 2023 | Nov 29, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub