Logo
›
›vulnerability›CVE-2022-4144
Name
CVE-2022-4144
Source
NVD ( link)Debian ( link)
Description
An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl_phys2virt() function does not check the size of the structure pointed to by the guest physical address, potentially reading past the end of the bar space into adjacent pages. A malicious guest user could use this flaw to crash the QEMU process on the host causing a denial of service condition.
CWEs
CWE-125
Published Date
Updated Date
Workaround
-
Advisories
https://bugzilla.redhat.com/show_bug.cgi?id=2148506Issue Tracking
https://lists.nongnu.org/archive/html/qemu-devel/2022-11/msg04143.htmlMailing List
https://security.netapp.com/advisory/ntap-20230127-0012/Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2148506Issue Tracking
https://lists.nongnu.org/archive/html/qemu-devel/2022-11/msg04143.htmlMailing List
https://security.netapp.com/advisory/ntap-20230127-0012/Third Party Advisory

Analysis#

Affected Component
Analysis
qemu
Patched

Vulnerability Ratings#

6.5
CVSSv31
6.5
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
qemu
buildroot
2025.02.x
9.2.0
Not Affected
qemu
buildroot
master
11.0.0
Not Affected
qemu
openwrt
master
10.1.3-r2
Not Affected
qemu
openwrt
openwrt-25.12
10.1.2-r1
Not Affected
qemu
yocto
master
11.0.1
Not Affected
qemu
yocto
scarthgap
8.2.7
Not Affected

Resolved with patches#

qemu (yocto:kirkstone)

#
Title
Author
Resolve
1
hw/display/qxl: Avoid buffer overrun in qxl_phys2virt
=?UTF-8?q?Philippe=20Mathieu-Daud=C3=A9?= <philmd@linaro.org>
CVE-2022-4144