PT-2022-7293 · Qemu+11 · Qemu+11

Awxylitol + 1 · Published 2022-11-29 · Updated 2024-06-15 · CVE-2022-4144

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl phys2virt() function does not check the size of the structure pointed to by the guest physical address, potentially reading past the end of the bar space into adjacent pages. A malicious guest user could use this flaw to crash the QEMU process on the host, causing a denial of service condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2023:0099

ALT-PU-2022-3429

ALT-PU-2023-1830

ALT-PU-2023-1869

AZL-11522

AZL-35164

BDU:2024-02426

CESA-2023_0099

CVE-2022-4144

OESA-2022-2136

OPENSUSE-SU-2024:12685-1

RHSA-2023:0099

RHSA-2023:0432

RHSA-2023_0099

RLSA-2023:0099

SUSE-SU-2023:0671-1

SUSE-SU-2023:0761-1

SUSE-SU-2023:0840-1

SUSE-SU-2023:0877-1

SUSE-SU-2023:0878-1

SUSE-SU-2023_0877-1

USN-6167-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Qemu

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 86

• 🔥 https://github.com/QiuhaoLi/CVE-2021-3929-3947 · Exploit
• https://bugzilla.redhat.com/show_bug.cgi?id=2148506 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2023:0671-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-12195.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2023-12368.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4172 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-4144 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-4144 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0840-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6167-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12685-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02426 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:0877-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0878-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-2136 · Vendor Advisory