Out-of-bounds Read

2019-05-1602:25:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

26.7%

JSON

QEMU is vulnerable to out-of-bounds reads vulnerability. This occurs when built with the Cirrus CLGD 54xx VGA Emulator support. Local guest OS privileged users could cause denial of service conditions by leveraging incorrect region calculation when updating VGA display which leads to an application crash.

CPENameOperatorVersion
qemu-kvm-rheveq2.6.0__28.el7_3.3
qemu-kvm-rheveq2.3.0__31.el7_2.16
qemu-kvm-rheveq2.3.0__31.el7_2.15
qemu-kvm-rheveq2.3.0__31.el7
qemu-kvm-rheveq2.9.0__14.el7
qemu-kvm-rheveq2.1.2__23.el7
qemu-kvm-rheveq2.9.0__16.el7_4.5
qemu-kvm-rheveq2.1.2__23.el7_1.10
qemu-kvm-rheveq2.3.0__31.el7_2.19
qemu-kvm-rheveq2.3.0__31.el7_2.21

Name	Operator	Version
qemu-kvm-rhev	eq	2.6.0__28.el7_3.3
qemu-kvm-rhev	eq	2.3.0__31.el7_2.16
qemu-kvm-rhev	eq	2.3.0__31.el7_2.15
qemu-kvm-rhev	eq	2.3.0__31.el7
qemu-kvm-rhev	eq	2.9.0__14.el7
qemu-kvm-rhev	eq	2.1.2__23.el7
qemu-kvm-rhev	eq	2.9.0__16.el7_4.5
qemu-kvm-rhev	eq	2.1.2__23.el7_1.10
qemu-kvm-rhev	eq	2.3.0__31.el7_2.19
qemu-kvm-rhev	eq	2.3.0__31.el7_2.21