The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Dec 5, 2017 | Aug 2, 2017 |
| Oracle_linux | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-system-aarch64Upgrade qemu-system-x86-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86Upgrade qemu-kvm-coreUpgrade ivshmem-toolsUpgrade qemu-block-glusterUpgrade qemuUpgrade qemu-commonUpgrade qemu-block-rbdUpgrade qemu-block-iscsi | May 15, 2019 | Jul 13, 2017 |
| Suse | — | Upgrade xen-libs-32bitUpgrade qemu-vgabiosUpgrade qemu-kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-chardev-baumUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-toolsUpgrade qemu-x86Upgrade qemu-microvmUpgrade xenUpgrade qemu-audio-spiceUpgrade kvmUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-paUpgrade qemu-s390xUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-sgabiosUpgrade xen-tools-domUUpgrade xen-develUpgrade xen-doc-htmlUpgrade qemu-hw-display-qxlUpgrade qemu-skibootUpgrade qemu-armUpgrade qemu-audio-ossUpgrade qemu-ui-openglUpgrade qemu-hw-usb-redirectUpgrade qemu-ksmUpgrade qemu-block-iscsiUpgrade qemu-seabiosUpgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-langUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-sshUpgrade qemu-ui-spice-appUpgrade xen-doc-pdfUpgrade qemu-ui-spice-coreUpgrade xen-libsUpgrade xen-toolsUpgrade xen-kmp-paeUpgrade qemu-ui-cursesUpgrade qemu-s390Upgrade xen-kmp-defaultUpgrade qemu-chardev-spiceUpgrade qemu-ipxe | Sep 1, 2017 | Aug 2, 2017 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-ppc | Feb 21, 2018 | Aug 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub