In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.
CVSS Details
- CVSS 3.1 Base Score: 3.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | May 28, 2020 |
| Debian | — | Upgrade qemu | Jul 2, 2020 | May 28, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Nov 12, 2020 | May 28, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Nov 3, 2020 | May 28, 2020 |
| Oracle_linux | — | Upgrade qemu-system-aarch64-coreUpgrade ivshmem-toolsUpgrade qemu-system-x86Upgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemu-system-x86-coreUpgrade qemu-kvmUpgrade qemu-block-glusterUpgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemu-commonUpgrade qemu-kvm-coreUpgrade qemu | Feb 9, 2021 | May 7, 2020 |
| Suse | — | Upgrade qemu-ui-cursesUpgrade qemu-sgabiosUpgrade qemu-microvmUpgrade qemu-block-dmgUpgrade qemu-linux-userUpgrade qemu-audio-ossUpgrade qemu-extraUpgrade qemuUpgrade qemu-audio-sdlUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-x86Upgrade qemu-vhost-user-gpuUpgrade qemu-ui-sdlUpgrade qemu-hw-display-qxlUpgrade kvmUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade qemu-block-nfsUpgrade qemu-ui-spice-coreUpgrade qemu-block-sshUpgrade qemu-chardev-baumUpgrade qemu-skibootUpgrade qemu-ui-gtkUpgrade qemu-block-iscsiUpgrade qemu-ipxeUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-armUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-spiceUpgrade qemu-ui-spice-appUpgrade qemu-ppcUpgrade qemu-langUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390Upgrade qemu-block-curlUpgrade qemu-chardev-spiceUpgrade qemu-s390xUpgrade qemu-toolsUpgrade qemu-ui-openglUpgrade qemu-seabiosUpgrade qemu-block-glusterUpgrade qemu-ksmUpgrade qemu-testsuiteUpgrade qemu-audio-alsa | Jul 29, 2020 | May 28, 2020 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemuUpgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-x86-xenUpgrade qemu-system-ppcUpgrade qemu-system-misc (Ubuntu Pro) | Aug 20, 2020 | May 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub