Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service (QEMU instance crash) via a crafted SCSI controller CTRL_GET_INFO command.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 9, 2016 | Feb 3, 2016 |
| Freebsd | — | Upgrade qemu-sbrunoUpgrade qemu-develUpgrade qemu-user-staticUpgrade qemu | Dec 10, 2025 | Jan 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Apr 11, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Dec 4, 2019 | Apr 11, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Apr 16, 2020 | Apr 11, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2015 |
| Suse | — | Upgrade qemu-s390xUpgrade qemu-x86Upgrade qemu-audio-paUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-kmp-defaultUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-alsaUpgrade qemu-microvmUpgrade qemu-chardev-baumUpgrade qemu-kvmUpgrade qemu-ui-gtkUpgrade qemu-vgabiosUpgrade xenUpgrade qemu-toolsUpgrade qemu-sgabiosUpgrade qemu-s390Upgrade qemu-block-curlUpgrade qemu-ppcUpgrade kvmUpgrade xen-doc-htmlUpgrade qemu-ui-cursesUpgrade qemu-langUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-armUpgrade qemu-chardev-spiceUpgrade qemu-ipxeUpgrade xen-kmp-paeUpgrade qemu-skibootUpgrade qemu-hw-display-qxlUpgrade xen-libs-32bitUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-ui-openglUpgrade xen-libsUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-tools-domuUpgrade qemu-ui-spice-appUpgrade qemu-seabiosUpgrade xen-develUpgrade xen-toolsUpgrade qemu-block-iscsiUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-ksmUpgrade qemu-block-rbdUpgrade qemu-audio-spiceUpgrade qemu-guest-agentUpgrade qemu-ui-spice-core | Mar 28, 2016 | Feb 3, 2016 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-sparc | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub