QEMU Security Update: Insufficient Validation and Insufficiently Sanitized Bits_per_pixel
Summary
DSA-3066-1: qemu - security update. Affects qemu versions < 1.1.2+dfsg-6a+deb7u5. Fixed in 1.1.2+dfsg-6a+deb7u5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
QEMU is a fast processor emulator that allows users to run virtual machines on various host platforms. It provides virtualization capabilities for different architectures and supports a wide range of operating systems. QEMU is widely used in cloud computing and virtualization environments.
Vulnerability Detail
Two vulnerabilities have been discovered in QEMU:
-
CVE-2014-3689: The Advanced Threat Research team at Intel Security found that the rectangle functions in the vmware-vga driver did not sufficiently validate guest provided parameters. This flaw could be exploited by a privileged guest user to write into the QEMU address space on the host, potentially escalating their privileges to those of the QEMU host process.
-
CVE-2014-7815: James Spadaro of Cisco reported that the QEMU VNC display driver did not properly sanitize the bits_per_pixel parameter from the client. An attacker with access to the guest's VNC console could exploit this vulnerability to crash the guest.
How To Fix
Minimum fixed version
1.1.2+dfsg-6a+deb7u5
This is the first release that contains the fix.
sudo apt-get install --only-upgrade qemuTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Two vulnerabilities have been discovered in QEMU that could allow an attacker to escalate privileges or crash the guest system. It is crucial to update the QEMU packages to the recommended versions to mitigate these vulnerabilities. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for qemu →
FAQ
QEMU is a fast processor emulator that allows users to run virtual machines on various host platforms. It provides virtualization capabilities for different architectures and supports a wide range of operating systems.
CVE-2014-3689 is a vulnerability in QEMU where guest provided parameters in the vmware-vga driver were insufficiently validated. This flaw could allow a privileged guest user to write into the QEMU address space on the host, potentially escalating their privileges.
CVE-2014-7815 is a vulnerability in QEMU where the QEMU VNC display driver did not properly sanitize the bits_per_pixel parameter from the client. An attacker with access to the guest's VNC console could exploit this vulnerability to crash the guest.
To fix these vulnerabilities, you should upgrade your QEMU packages to the recommended versions for your distribution. Please refer to the 'how_to_fix' section for more details.
No specific workarounds have been mentioned for these vulnerabilities. It is recommended to apply the security updates as soon as possible.
Related vulnerabilities
Recent vulnerabilities recorded for qemu.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
