CVE-2019-6778

MEDIUM

Description

In QEMU 3.0.0, tcp_emu in slirp/tcp_subr.c has a heap-based buffer overflow.

References

http://lists.opensuse.org/opensuse-security-announce/2019-02/msg00073.html

http://lists.opensuse.org/opensuse-security-announce/2019-03/msg00042.html

http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html

http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00007.html

http://www.openwall.com/lists/oss-security/2019/01/24/5

http://www.securityfocus.com/bid/106758

https://access.redhat.com/errata/RHSA-2019:1883

https://access.redhat.com/errata/RHSA-2019:1968

https://access.redhat.com/errata/RHSA-2019:2425

https://access.redhat.com/errata/RHSA-2019:2892

https://lists.fedoraproject.org/archives/list/[email protected]/message/CGCFIFSIWUREEQQOZDZFBYKWZHXCWBZN/

https://lists.fedoraproject.org/archives/list/[email protected]/message/KJMTVGDLA654HNCDGLCUEIP36SNJEKK7/

https://lists.gnu.org/archive/html/qemu-devel/2019-01/msg03132.html

https://seclists.org/bugtraq/2019/May/76

https://usn.ubuntu.com/3923-1/

https://www.debian.org/security/2019/dsa-4454

Details

Source: MITRE

Published: 2019-03-21

Updated: 2020-08-24

Type: CWE-787

Risk Information

CVSS v2.0

Base Score: 4.6

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Impact Score: 6.4

Exploitability Score: 3.9

Severity: MEDIUM

CVSS v3.0

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score: 5.9

Exploitability Score: 1.8

Severity: HIGH

Vulnerable Software

Configuration 1

OR

cpe:2.3:a:qemu:qemu:3.0.0:*:*:*:*:*:*:*

Configuration 2

OR

cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:leap:42.3:*:*:*:*:*:*:*

Configuration 3

OR

cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

Configuration 4

OR

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*

Tenable Plugins

View all (48 total)

IDNameProductFamilySeverity
137586SUSE SLES12 Security Update : qemu (SUSE-SU-2020:1538-1)NessusSuSE Local Security Checks
medium
137581SUSE SLES12 Security Update : qemu (SUSE-SU-2020:1526-1)NessusSuSE Local Security Checks
medium
137579SUSE SLES15 Security Update : qemu (SUSE-SU-2020:1523-1)NessusSuSE Local Security Checks
medium
137577SUSE SLES12 Security Update : qemu (SUSE-SU-2020:1514-1)NessusSuSE Local Security Checks
medium
137549SUSE SLES12 Security Update : qemu (SUSE-SU-2020:1501-1)NessusSuSE Local Security Checks
medium
135559EulerOS 2.0 SP3 : qemu-kvm (EulerOS-SA-2020-1430)NessusHuawei Local Security Checks
critical
135265openSUSE Security Update : qemu (openSUSE-2020-468)NessusSuSE Local Security Checks
medium
135169SUSE SLES12 Security Update : qemu (SUSE-SU-2020:0845-1)NessusSuSE Local Security Checks
medium
135168SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2020:0844-1)NessusSuSE Local Security Checks
medium
134555EulerOS Virtualization for ARM 64 3.0.2.0 : qemu-kvm (EulerOS-SA-2020-1266)NessusHuawei Local Security Checks
medium
134319NewStart CGSL MAIN 4.05 : qemu-kvm Multiple Vulnerabilities (NS-SA-2020-0019)NessusNewStart CGSL Local Security Checks
high
131771NewStart CGSL MAIN 4.06 : qemu-kvm Multiple Vulnerabilities (NS-SA-2019-0211)NessusNewStart CGSL Local Security Checks
high
131585EulerOS 2.0 SP2 : qemu-kvm (EulerOS-SA-2019-2431)NessusHuawei Local Security Checks
high
131517EulerOS Virtualization for ARM 64 3.0.3.0 : qemu-kvm (EulerOS-SA-2019-2352)NessusHuawei Local Security Checks
medium
130689EulerOS 2.0 SP5 : qemu-kvm (EulerOS-SA-2019-2227)NessusHuawei Local Security Checks
critical
129473CentOS 6 : qemu-kvm (CESA-2019:2892)NessusCentOS Local Security Checks
high
129370OracleVM 3.4 : qemu-kvm (OVMSA-2019-0045)NessusOracleVM Local Security Checks
high
129334Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20190924)NessusScientific Linux Local Security Checks
high
129332RHEL 6 : qemu-kvm (RHSA-2019:2892)NessusRed Hat Local Security Checks
high
129329Oracle Linux 6 : qemu-kvm (ELSA-2019-2892)NessusOracle Linux Local Security Checks
high
128458openSUSE Security Update : podman / slirp4netns and libcontainers-common (openSUSE-2019-2044)NessusSuSE Local Security Checks
medium
128302SUSE SLES15 Security Update : podman, slirp4netns / libcontainers-common (SUSE-SU-2019:2223-1)NessusSuSE Local Security Checks
medium
128184EulerOS 2.0 SP8 : qemu-kvm (EulerOS-SA-2019-1815)NessusHuawei Local Security Checks
medium
127728Scientific Linux Security Update : qemu-kvm on SL7.x x86_64 (20190729)NessusScientific Linux Local Security Checks
high
127640RHEL 7 : Virtualization Manager (RHSA-2019:1968)NessusRed Hat Local Security Checks
high
127621RHEL 7 : qemu-kvm (RHSA-2019:1883)NessusRed Hat Local Security Checks
medium
127605Oracle Linux 7 : qemu-kvm (ELSA-2019-1883)NessusOracle Linux Local Security Checks
medium
127471CentOS 7 : qemu-kvm (CESA-2019:1883)NessusCentOS Local Security Checks
medium
125609Debian DSA-4454-1 : qemu - security updateNessusDebian Local Security Checks
high
124467Fedora 30 : 2:qemu (2019-0664c7724d)NessusFedora Local Security Checks
medium
124147openSUSE Security Update : xen (openSUSE-2019-1226)NessusSuSE Local Security Checks
high
123993SUSE SLES12 Security Update : xen (SUSE-SU-2019:0921-1)NessusSuSE Local Security Checks
medium
123825SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2019:0891-1)NessusSuSE Local Security Checks
medium
123637SUSE SLES11 Security Update : xen (SUSE-SU-2019:14001-1)NessusSuSE Local Security Checks
medium
123634SUSE SLES12 Security Update : xen (SUSE-SU-2019:0827-1)NessusSuSE Local Security Checks
high
123633SUSE SLES12 Security Update : xen (SUSE-SU-2019:0825-1)NessusSuSE Local Security Checks
high
123493openSUSE Security Update : qemu (openSUSE-2019-1074)NessusSuSE Local Security Checks
medium
123457Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 18.10 : QEMU vulnerabilities (USN-3923-1)NessusUbuntu Local Security Checks
medium
123101Fedora 29 : 2:qemu (2019-88a98ce795)NessusFedora Local Security Checks
medium
122776SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2019:0582-1)NessusSuSE Local Security Checks
medium
122511Debian DLA-1694-1 : qemu security updateNessusDebian Local Security Checks
medium
122495openSUSE Security Update : qemu (openSUSE-2019-254)NessusSuSE Local Security Checks
medium
122471SUSE SLES12 Security Update : qemu (SUSE-SU-2019:0489-1)NessusSuSE Local Security Checks
medium
122419SUSE SLES12 Security Update : qemu (SUSE-SU-2019:0471-1)NessusSuSE Local Security Checks
medium
122397SUSE SLES12 Security Update : qemu (SUSE-SU-2019:0457-1)NessusSuSE Local Security Checks
medium
122341SUSE SLED12 / SLES12 Security Update : qemu (SUSE-SU-2019:0435-1)NessusSuSE Local Security Checks
medium
122313SUSE SLES11 Security Update : kvm (SUSE-SU-2019:13962-1)NessusSuSE Local Security Checks
medium
122309SUSE SLED15 / SLES15 Security Update : qemu (SUSE-SU-2019:0423-1)NessusSuSE Local Security Checks
medium