Security Update for qemu-kvm
Summary
DLA-939-1: qemu-kvm - security update. Affects qemu-kvm versions < 1.1.2+dfsg-6+deb7u21. Fixed in 1.1.2+dfsg-6+deb7u21. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
qemu-kvm is a full virtualization solution on x86 hardware based on Quick Emulator (Qemu). It provides a platform for running virtual machines with various operating systems. This vulnerability affects qemu-kvm version 1.1.2+dfsg-6+deb7u21 on Debian 7 Wheezy.
Vulnerability Detail
The vulnerability, identified as CVE-2016-9603, exists in qemu-kvm when built with the Cirrus CLGD 54xx VGA Emulator and the VNC display driver support. It is a heap buffer overflow issue that occurs when a VNC client attempts to update its display after a VGA operation is performed by a guest. An attacker with privileged access inside the guest could exploit this flaw to crash the Qemu process, resulting in a denial-of-service (DoS) condition. Additionally, the attacker may be able to execute arbitrary code on the host with the privileges of the Qemu process.
Another vulnerability, CVE-2017-7718, affects qemu-kvm built with the Cirrus CLGD 54xx VGA Emulator support. It is an out-of-bounds access issue that occurs during the copying of VGA data via bitblt functions cirrus_bitblt_rop_fwd_transp_ and/or cirrus_bitblt_rop_fwd_. A privileged user inside the guest could exploit this flaw to crash the Qemu process, leading to a DoS.
Furthermore, qemu-kvm built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds read/write access issue, identified as CVE-2017-7980. This vulnerability occurs while copying VGA data via various bitblt functions. A privileged user inside the guest could exploit this flaw to crash the Qemu process, resulting in a DoS condition or potentially executing arbitrary code on the host with the privileges of the Qemu process.
How To Fix
Minimum fixed version
1.1.2+dfsg-6+deb7u21
This is the first release that contains the fix.
sudo apt-get install --only-upgrade qemu-kvmTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
qemu-kvm version 1.1.2+dfsg-6+deb7u21 on Debian 7 Wheezy is affected by multiple vulnerabilities. To mitigate these vulnerabilities, it is crucial to upgrade the qemu-kvm package to the recommended version. For further assistance and support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for qemu-kvm →
FAQ
qemu-kvm is a full virtualization solution on x86 hardware based on Quick Emulator (Qemu). It allows users to run virtual machines with various operating systems.
The vulnerabilities in qemu-kvm could allow a privileged user inside the guest to crash the Qemu process, resulting in a denial-of-service (DoS) condition. In some cases, the attacker may also be able to execute arbitrary code on the host with the privileges of the Qemu process.
You can check the version of qemu-kvm installed on your system by running the following command:
dpkg -l qemu-kvm
No, there is no known workaround for these vulnerabilities. It is recommended to upgrade to the fixed version of qemu-kvm.
You can find more information about Debian LTS security advisories, including how to apply updates and frequently asked questions, on the Debian Wiki: https://wiki.debian.org/LTS
Related vulnerabilities
Recent vulnerabilities recorded for qemu-kvm.
