阿里云漏洞库

漏洞描述

An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
https://bugzilla.redhat.com/show_bug.cgi?id=1979858
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
https://lists.nongnu.org/archive/html/qemu-devel/2021-09/msg01682.html
https://security.netapp.com/advisory/ntap-20220407-0003/
https://ubuntu.com/security/CVE-2021-3638

受影响软件情况

1
#	类型	厂商	产品	版本	影响面
	运行在以下环境
	应用	qemu	qemu	*	From (including) 4.0.0	Up to (including) 6.1.0
	运行在以下环境
	系统	debian_10	qemu	*		Up to (excluding) 3.1+dfsg-8+deb10u11
	运行在以下环境
	系统	debian_11	qemu	*		Up to (excluding) 5.2+dfsg-11+deb11u1
	运行在以下环境
	系统	debian_12	qemu	*		Up to (excluding) 6.1+dfsg-6
	运行在以下环境
	系统	fedora_33	fetchmail	*		Up to (excluding) 6.4.20-1.fc33
	运行在以下环境
	系统	fedora_34	fetchmail	*		Up to (excluding) 6.4.20-1.fc34
	运行在以下环境
	系统	fedora_36	qemu	*		Up to (excluding) 6.2.0-17.fc36
	运行在以下环境
	系统	fedora_37	qemu	*		Up to (excluding) 7.0.0-12.fc37
	运行在以下环境
	系统	kylinos_aarch64_V10	qemu	*		Up to (excluding) 4.1.0-63.hostos.p06.ky10
	运行在以下环境
	系统	kylinos_aarch64_V10SP1	qemu	*		Up to (excluding) 4.1.0-44.p06.ky10
	运行在以下环境
	系统	kylinos_aarch64_V10SP2	qemu	*		Up to (excluding) 4.1.0-32.p10.ky10
	运行在以下环境
	系统	kylinos_aarch64_V10SP3	qemu	*		Up to (excluding) 4.1.0-63.p16.ky10
	运行在以下环境
	系统	kylinos_loongarch64_V10SP1	qemu-img	*		Up to (excluding) 4.2.0-34.8.p05.a.ky10
	运行在以下环境
	系统	kylinos_loongarch64_V10SP3	qemu	*		Up to (excluding) 4.1.0-63.p08.a.ky10
	运行在以下环境
	系统	kylinos_x86_64_V10	qemu	*		Up to (excluding) 4.1.0-63.hostos.p06.ky10
	运行在以下环境
	系统	kylinos_x86_64_V10SP1	qemu	*		Up to (excluding) 4.1.0-44.p06.ky10
	运行在以下环境
	系统	kylinos_x86_64_V10SP2	qemu	*		Up to (excluding) 4.1.0-32.p10.ky10
	运行在以下环境
	系统	kylinos_x86_64_V10SP3	qemu	*		Up to (excluding) 4.1.0-63.p16.ky10
	运行在以下环境
	系统	opensuse_Leap_15.4	+	*		Up to (excluding) 6.2.0-150400.37.23.1
	运行在以下环境
	系统	opensuse_Leap_15.5	+	*		Up to (excluding) 7.1.0-150500.49.9.2
	运行在以下环境
	系统	oracle_7	qemu	*		Up to (excluding) 4.2.1-24.el7
	运行在以下环境
	系统	ubuntu_20.04	qemu	*		Up to (excluding) 4.2-3ubuntu6.28

攻击路径

远程
攻击复杂度

复杂
权限要求

无需权限
影响范围

有限影响
EXP成熟度

未验证
补丁情况

官方补丁
数据保密性

数据泄露
数据完整性

传输被破坏
服务器危害

DoS
全网数量

N/A

CWE-ID	漏洞类型
CWE-787	跨界内存写

低危 qemu qemu 跨界内存写

漏洞描述

解决建议

参考链接

受影响软件情况