Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service (guest crash) via a crafted SAI READ CAPACITY SCSI command. NOTE: this is only a vulnerability when root has manually modified certain permissions or ACLs.
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade xen-develUpgrade xen-libsUpgrade xen | Dec 1, 2016 | Apr 1, 2014 |
| Oracle_linux | — | Upgrade xen-develUpgrade xen-libsUpgrade xen | Oct 16, 2024 | Apr 1, 2014 |
| Suse | — | Upgrade kvm-debugsourceUpgrade kvmUpgrade kvm-debuginfo | Dec 12, 2013 | Dec 10, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub