Name: CVE-2022-4172: Buffer Copy without Checking Size of Input
Creator: Rapid7
Published: 2022-11-29T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-4172, CWE-120, CVSS 6.5, EPSS 0.00393

An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the read_erst_record() and write_erst_record() functions. Both issues may allow the guest to overrun the host buffer allocated for the ERST memory device. A malicious guest could use these flaws to crash the QEMU process on the host.

CVSS Details

CVSS 3.1 Base Score: 6.5
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade qemu-kvm-commonUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvmUpgrade qemu-kvm-docsUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-toolsUpgrade qemu-kvm-block-rbdUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-coreUpgrade qemu-pr-helper	May 15, 2023	Nov 29, 2022
Centos_linux	—	Upgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-imgUpgrade qemu-kvm-audio-paUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvmUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-pr-helperUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-img-debuginfoUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-usb-redirect-debuginfo	May 15, 2023	Nov 29, 2022
Debian	—	Upgrade qemu	Jul 30, 2024	Nov 29, 2022
Gentoo Linux	—	Upgrade app-emulation/qemu.	Aug 12, 2024	Nov 29, 2022
Oracle_linux	—	Upgrade qemuUpgrade libvirt-nssUpgrade libvirt-adminUpgrade libnbdUpgrade supermin-develUpgrade qemu-kvm-device-usb-hostUpgrade qemu-system-x86-coreUpgrade qemu-block-rbdUpgrade nbdkit-tar-filterUpgrade nbdkit-gzip-pluginUpgrade perl-Sys-GuestfsUpgrade libguestfs-benchmarkingUpgrade qemu-kvm-toolsUpgrade libvirt-daemon-config-networkUpgrade libvirt-bash-completionUpgrade nbdkit-vddk-pluginUpgrade superminUpgrade qemu-commonUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade nbdkit-python-pluginUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvm-device-display-virtio-vgaUpgrade virt-v2v-man-pages-jaUpgrade python3-hivexUpgrade libvirt-wiresharkUpgrade qemu-guest-agentUpgrade nbdkit-serverUpgrade libvirtUpgrade libguestfs-toolsUpgrade nbdkit-basic-filtersUpgrade qemu-kvm-ui-egl-headlessUpgrade libvirt-develUpgrade qemu-kvm-block-glusterUpgrade nbdkit-nbd-pluginUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemonUpgrade swtpm-libsUpgrade qemu-kvm-block-sshUpgrade libguestfs-applianceUpgrade qemu-kvm-device-usb-redirectUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-coreUpgrade libtpmsUpgrade qemu-kvm-block-curlUpgrade libvirt-lock-sanlockUpgrade libguestfs-gobject-develUpgrade nbdkit-xz-filterUpgrade nbdkit-tar-pluginUpgrade qemu-kvm-audio-paUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-develUpgrade lua-guestfsUpgrade qemu-kvm-block-rbdUpgrade libiscsi-utilsUpgrade libnbd-develUpgrade libguestfs-rescueUpgrade python3-libnbdUpgrade ivshmem-toolsUpgrade libguestfs-winsupportUpgrade virt-v2v-bash-completionUpgrade libvirt-clientUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-device-display-virtio-gpuUpgrade libvirt-daemon-driver-qemuUpgrade netcfUpgrade libiscsi-develUpgrade python3-libguestfsUpgrade libguestfs-xfsUpgrade seabiosUpgrade swtpm-toolsUpgrade libguestfs-inspect-iconsUpgrade virt-v2vUpgrade qemu-block-glusterUpgrade libvirt-docsUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-system-aarch64-coreUpgrade hivexUpgrade swtpm-develUpgrade libvirt-dbusUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-interfaceUpgrade libnbd-bash-completionUpgrade libguestfs-gfs2Upgrade swtpmUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-coreUpgrade libguestfs-rsyncUpgrade libguestfs-tools-cUpgrade seabios-binUpgrade seavgabios-binUpgrade qemu-kvm-docsUpgrade netcf-develUpgrade libvirt-libsUpgrade libtpms-develUpgrade hivex-develUpgrade sgabios-binUpgrade libguestfs-gobjectUpgrade python3-libvirtUpgrade libguestfs-javaUpgrade libguestfs-develUpgrade qemu-pr-helperUpgrade qemu-kvm-block-iscsiUpgrade qemu-block-iscsiUpgrade perl-hivexUpgrade swtpm-tools-pkcs11Upgrade nbdkit-ssh-pluginUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-javadocUpgrade nbdfuseUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-system-x86Upgrade qemu-kvm-ui-openglUpgrade ruby-libguestfsUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-commonUpgrade qemu-imgUpgrade nbdkit-linuxdisk-pluginUpgrade nbdkit-gzip-filterUpgrade nbdkit-curl-pluginUpgrade libvirt-daemon-driver-storage-diskUpgrade virt-dibUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-man-pages-jaUpgrade libguestfs-java-develUpgrade libguestfsUpgrade libiscsiUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-kvmUpgrade nbdkit-tmpdisk-pluginUpgrade virt-v2v-man-pages-ukUpgrade ruby-hivexUpgrade qemu-virtiofsdUpgrade perl-Sys-VirtUpgrade nbdkit	Jan 24, 2023	Oct 19, 2022
Redhat_linux	—	Upgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-pr-helperUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-commonUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-core-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-imgUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-toolsUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-coreUpgrade qemu-kvm-ui-egl-headless-debuginfo	May 15, 2023	Nov 29, 2022
Suse	—	Upgrade qemu-tools	Jun 13, 2023	Nov 29, 2022
Ubuntu	—	Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-commonUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-dataUpgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-system-x86-microvmUpgrade qemu-system-guiUpgrade qemu-guest-agentUpgrade qemu-system-x86-xenUpgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-kvmUpgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemuUpgrade qemu-system-ppcUpgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-xenUpgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-system-common (Ubuntu Pro)	Jun 20, 2023	Nov 29, 2022

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence