| Package | Affected versions | Patched versions |
|---|---|---|
| qemu | < 1.2.0 | 1.2.0 |
| virtualization | = 3.0= 5.0= 6.0 |
Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free