QEMU 'cirrus _ vga. c' Security Bypass Vulnerability

QEMU 'cirrus _ vga. c' Security Bypass Vulnerability

Release date: 2014-4 4
Updated on: 2014-6 6

Affected Systems:
QEMU
Description:
Bugtraq id: 71477
CVE (CAN) ID: CVE-2014-8106

QEMU is an open source simulator software.

QEMU has an invalid Cirrus blit region check vulnerability. Attackers can exploit this vulnerability to bypass security restrictions and perform unauthorized operations.

<* Source: Paolo Bonzini
*>

Suggestion:
Vendor patch:

QEMU
----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://lists.gnu.org/archive/html/qemu-devel/2014-12/msg00508.html

Ubuntu 12.04 cannot find the Qemu command

Install QEMU + efi bios on Arch Linux

QEMU translation framework and debugging tools

QEMU details: click here
QEMU: click here

This article permanently updates the link address: