Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service (QEMU instance crash) via a crafted SCSI controller CTRL_GET_INFO command.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 9, 2016 | Feb 3, 2016 |
| Freebsd | — | Upgrade qemu-user-staticUpgrade qemuUpgrade qemu-sbrunoUpgrade qemu-devel | Dec 10, 2025 | Jan 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Apr 11, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Dec 4, 2019 | Apr 11, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Apr 16, 2020 | Apr 11, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2015 |
| Suse | — | Upgrade qemu-ui-spice-coreUpgrade qemu-armUpgrade qemu-ui-openglUpgrade qemu-ipxeUpgrade qemu-ui-spice-appUpgrade qemu-langUpgrade qemu-hw-display-virtio-vgaUpgrade qemuUpgrade xen-tools-xendomains-wait-diskUpgrade xen-kmp-paeUpgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-seabiosUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade xen-libsUpgrade xen-develUpgrade xen-libs-32bitUpgrade qemu-chardev-spiceUpgrade xen-tools-domuUpgrade xen-toolsUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-ksmUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-skibootUpgrade qemu-hw-display-qxlUpgrade qemu-sgabiosUpgrade qemu-microvmUpgrade qemu-hw-usb-redirectUpgrade qemu-kvmUpgrade xenUpgrade xen-doc-htmlUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu-ppcUpgrade qemu-s390Upgrade qemu-audio-paUpgrade qemu-block-curlUpgrade qemu-ui-gtkUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390xUpgrade xen-kmp-defaultUpgrade qemu-ui-cursesUpgrade qemu-audio-alsaUpgrade qemu-chardev-baumUpgrade kvmUpgrade qemu-tools | Mar 28, 2016 | Feb 3, 2016 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-aarch64 | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub