NULL pointer dereference in QEMU - CVE-2019-12155

Vulnerability identifier: #VU20499

CSH Severity: Medium

CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-12155

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in "hw/display/qxl.c". A remote attacker can perform a denial of service (DoS) attack.

QEMU
Red Hat Virtualization Manager
qemu (Ubuntu package)
qemu-kvm-rhev (Red Hat package)
qemu
Red Hat Virtualization for IBM Power LE
Red Hat Virtualization
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for x86_64
Opensuse
Fedora
Red Hat OpenStack
Red Hat OpenStack for IBM Power

Install update from vendor's website.

QEMU - update to 4.1.0
qemu (Ubuntu package) - addressed in versions 1:2.5+dfsg-5ubuntu10.42, 1:2.11+dfsg-1ubuntu7.20, 1:3.1+dfsg-2ubuntu3.6, 1:4.0+dfsg-0ubuntu9.1
qemu-kvm-rhev (Red Hat package) - update to 2.12.0-44.el7
qemu - addressed in versions 3.0.1-4.fc29, 3.1.0-9.fc30

• http://www.openwall.com/lists/oss-security/2019/05/22/1
• https://lists.gnu.org/archive/html/qemu-devel/2019-05/msg01321.html
• https://seclists.org/bugtraq/2019/May/76

• OpenSUSE Linux update for qemu
• OpenSUSE Linux update for qemu
• Red Hat update for qemu-kvm
• Red Hat update for qemu-kvm
• Red Hat update for qemu-kvm-rhev
• Red Hat update for virt:rhel
• Red Hat update for qemu-kvm-rhev
• Red Hat update for qemu-kvm-rhev
• Ubuntu update for QEMU
• Multiple vulnerabilities in Red Hat Enterprise Linux Advanced Virtualization
• Red Hat update for qemu-kvm-rhev
• Red Hat Virtualization 4 update for qemu-kvm-rhev
• Fedora 30 update for qemu
• Fedora 29 update for qemu