The address_space_write_continue function in exec.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (out-of-bounds access and guest instance crash) by leveraging use of qemu_map_ram_ptr to access guest ram block area.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Dec 5, 2017 | Aug 2, 2017 |
| Oracle_linux | — | Upgrade qemu-system-aarch64Upgrade qemu-system-aarch64-coreUpgrade qemu-kvmUpgrade qemu-system-x86-coreUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade qemu-system-x86Upgrade qemuUpgrade qemu-commonUpgrade qemu-block-iscsiUpgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade qemu-block-gluster | May 15, 2019 | Jul 13, 2017 |
| Suse | — | Upgrade qemu-chardev-baumUpgrade qemu-kvmUpgrade kvmUpgrade qemu-x86Upgrade qemu-audio-paUpgrade xen-develUpgrade xen-tools-domuUpgrade qemu-s390xUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-gpuUpgrade xen-doc-htmlUpgrade qemu-ppcUpgrade xenUpgrade qemu-microvmUpgrade qemu-audio-spiceUpgrade qemu-sgabiosUpgrade qemu-vgabiosUpgrade xen-libs-32bitUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-guest-agentUpgrade qemu-toolsUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-doc-pdfUpgrade qemu-ipxeUpgrade qemu-seabiosUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-armUpgrade qemu-block-iscsiUpgrade xen-kmp-defaultUpgrade qemu-audio-ossUpgrade qemu-block-sshUpgrade qemu-skibootUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-appUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-ksmUpgrade qemu-s390Upgrade qemu-ui-cursesUpgrade qemu-langUpgrade xen-kmp-paeUpgrade qemu-ui-spice-coreUpgrade qemu-hw-usb-redirectUpgrade xen-toolsUpgrade xen-libsUpgrade qemu-chardev-spice | Sep 1, 2017 | Aug 2, 2017 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system | Feb 21, 2018 | Aug 2, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub