Debian/qemu: medium 5.5
hw/rdma/rdma_backend.c in QEMU allows guest OS users to trigger out-of-bounds access via a PvrdmaSqWqe ring element with a large num_sge value.
Action: Upgrade qemu to 1:4.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:4.1-1 | - |
Fixed versions
| 1:4.1-1 |
Sources
- osv: DEBIAN-CVE-2018-20124#Debian:13/qemu
- https://security-tracker.debian.org/tracker/CVE-2018-20124
published · modified · JSON