Integer overflow in QEMU - CVE-2022-4172

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU72299

Integer overflow in QEMU - CVE-2022-4172

Published: February 15, 2023


Vulnerability identifier: #VU72299
CSH Severity: Medium
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-4172
CWE-ID: CWE-190
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a malicious guest to perform a denial of service (DoS) attack.

The vulnerability exists due to integer overflow within the read_erst_record() and write_erst_record() functions in the ACPI Error Record Serialization Table (ERST) device of QEMU. A malicious guest can overrun the host buffer allocated for the ERST memory device and crash the QEMU process on the host.


Affected software

QEMU
Gentoo Linux
Oracle Linux
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Ubuntu
Fedora
Traefik
Red Hat OpenShift Container Platform
qemu-system-sparc (Ubuntu package)
qemu (Ubuntu package)
qemu-system-x86 (Ubuntu package)
qemu-system-ppc (Ubuntu package)
qemu-system (Ubuntu package)
qemu-system-common (Ubuntu package)
qemu-kvm (Ubuntu package)
qemu-guest-agent (Ubuntu package)
qemu-system-aarch64 (Ubuntu package)
qemu-system-s390x (Ubuntu package)
qemu-common (Ubuntu package)
qemu-system-mips (Ubuntu package)
qemu-system-arm (Ubuntu package)
qemu-system-misc (Ubuntu package)
qemu-system-x86-xen (Ubuntu package)
qemu-system-x86-microvm (Ubuntu package)
qemu-system-gui (Ubuntu package)
qemu-system-data (Ubuntu package)
qemu-system-xen (Ubuntu package)
qemu
qemu-kvm (Red Hat package)
app-emulation/qemu
VMware Tanzu Operations Manager

How to mitigate CVE-2022-4172

Install updates from vendor's website.

Traefik - update to 2.9.8
Red Hat OpenShift Container Platform - update to 4.13.2
qemu-system-sparc (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11
qemu-system-x86 (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-system-ppc (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-system (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-system-common (Ubuntu package) - addressed in versions Ubuntu Pro, 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-kvm (Ubuntu package) - addressed in versions Ubuntu Pro, 1:4.2-3ubuntu6.27
qemu-guest-agent (Ubuntu package) - addressed in versions Ubuntu Pro, 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-system-aarch64 (Ubuntu package) - update to Ubuntu Pro (Infra-only)
qemu-system-s390x (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-common (Ubuntu package) - update to Ubuntu Pro
qemu-system-mips (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-system-arm (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-system-misc (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
VMware Tanzu Operations Manager - addressed in versions 2.10.59, 3.0.11
qemu-system-x86-xen (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-system-x86-microvm (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11
qemu-system-gui (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-system-data (Ubuntu package) - addressed in versions 1:4.2-3ubuntu6.27, 1:6.2+dfsg-2ubuntu6.11, 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu-system-xen (Ubuntu package) - addressed in versions 1:7.0+dfsg-7ubuntu2.6, 1:7.2+dfsg-5ubuntu2.2
qemu - update to 7.0.0-12.fc37
qemu-kvm (Red Hat package) - update to 7.2.0-14.el9_2
app-emulation/qemu - update to 8.0.0

External References

Related Security Bulletins