A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a ring of descriptors for CQ and async events, potentially leading to an out-of-bounds read and crash of QEMU.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Dec 9, 2024 | Mar 23, 2023 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 12, 2024 | Mar 23, 2023 |
| Oracle_linux | — | Upgrade python3-libnbdUpgrade python3-libvirtUpgrade netcf-develUpgrade libvirt-daemon-driver-secretUpgrade ruby-libguestfsUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-docsUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-scsiUpgrade seabios-binUpgrade swtpm-develUpgrade hivex-develUpgrade virt-v2v-man-pages-jaUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-block-glusterUpgrade libguestfs-xfsUpgrade libvirtUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-kvmUpgrade libvirt-nssUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-basic-filtersUpgrade swtpmUpgrade swtpm-libsUpgrade nbdkit-ssh-pluginUpgrade nbdkit-tar-filterUpgrade hivexUpgrade seavgabios-binUpgrade libiscsi-develUpgrade libguestfs-gobjectUpgrade qemu-virtiofsdUpgrade ruby-hivexUpgrade libguestfs-toolsUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-networkUpgrade libvirt-clientUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-applianceUpgrade superminUpgrade perl-hivexUpgrade libguestfs-inspect-iconsUpgrade libtpmsUpgrade nbdkit-basic-pluginsUpgrade sgabiosUpgrade supermin-develUpgrade qemu-kvm-commonUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-javadocUpgrade nbdkit-develUpgrade libvirt-libsUpgrade lua-guestfsUpgrade qemu-imgUpgrade seabiosUpgrade virt-v2vUpgrade libguestfs-gfs2Upgrade nbdkit-tar-pluginUpgrade nbdkit-gzip-pluginUpgrade libnbd-bash-completionUpgrade libiscsi-utilsUpgrade nbdkit-python-pluginUpgrade libvirt-lock-sanlockUpgrade libtpms-develUpgrade libiscsiUpgrade swtpm-toolsUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storageUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-gobject-develUpgrade qemu-kvm-block-curlUpgrade virt-v2v-bash-completionUpgrade qemu-kvmUpgrade perl-Sys-VirtUpgrade libguestfs-winsupportUpgrade python3-hivexUpgrade nbdkit-vddk-pluginUpgrade sgabios-binUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-block-rbdUpgrade libvirt-wiresharkUpgrade libvirt-develUpgrade libnbdUpgrade libguestfs-java-develUpgrade libguestfsUpgrade virt-v2v-man-pages-ukUpgrade nbdkit-gzip-filterUpgrade nbdkit-serverUpgrade libguestfs-bash-completionUpgrade virt-dibUpgrade qemu-kvm-block-iscsiUpgrade qemu-guest-agentUpgrade nbdkit-curl-pluginUpgrade nbdkitUpgrade nbdfuseUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemonUpgrade libguestfs-rsyncUpgrade nbdkit-nbd-pluginUpgrade nbdkit-xz-filterUpgrade libguestfs-tools-cUpgrade libguestfs-rescueUpgrade libguestfs-man-pages-ukUpgrade libguestfs-man-pages-jaUpgrade libguestfs-develUpgrade netcfUpgrade libnbd-develUpgrade swtpm-tools-pkcs11Upgrade netcf-libsUpgrade nbdkit-linuxdisk-pluginUpgrade python3-libguestfs | May 17, 2023 | Feb 27, 2023 |
| Suse | — | Upgrade qemu-ui-gtkUpgrade qemu-accel-tcg-x86Upgrade qemu-toolsUpgrade qemu-SLOFUpgrade qemu-x86Upgrade qemu-hw-usb-hostUpgrade qemu-hw-usb-smartcardUpgrade qemu-audio-paUpgrade qemu-hw-usb-redirectUpgrade qemu-vgabiosUpgrade qemu-kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-dbusUpgrade qemu-audio-alsaUpgrade qemu-microvmUpgrade qemu-block-curlUpgrade qemu-chardev-baumUpgrade qemu-ui-cursesUpgrade qemu-ui-spice-coreUpgrade qemu-accel-qtestUpgrade qemu-sgabiosUpgrade qemu-ppcUpgrade qemu-extraUpgrade qemu-ksmUpgrade qemu-skibootUpgrade qemu-block-iscsiUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-spice-appUpgrade qemu-ui-openglUpgrade qemu-audio-dbusUpgrade qemu-hw-display-qxlUpgrade qemu-audio-spiceUpgrade qemu-langUpgrade qemu-ivshmem-toolsUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-guest-agentUpgrade qemu-armUpgrade qemu-seabiosUpgrade qemu-block-glusterUpgrade qemu-vhost-user-gpuUpgrade qemu-ipxeUpgrade qemu-block-nfsUpgrade qemuUpgrade qemu-chardev-spiceUpgrade qemu-audio-jackUpgrade qemu-block-dmgUpgrade qemu-block-rbd | Apr 4, 2024 | Mar 23, 2023 |
| Ubuntu | — | Upgrade qemu-system-x86-xenUpgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-x86-microvmUpgrade qemu-system-xenUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemuUpgrade qemu-system-mipsUpgrade qemu-system-x86 | Jan 9, 2024 | Mar 23, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub