Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service (QEMU instance crash) via a crafted SCSI controller CTRL_GET_INFO command.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 9, 2016 | Feb 3, 2016 |
| Freebsd | — | Upgrade qemuUpgrade qemu-user-staticUpgrade qemu-develUpgrade qemu-sbruno | Dec 10, 2025 | Jan 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Apr 11, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 4, 2019 | Apr 11, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Apr 16, 2020 | Apr 11, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2015 |
| Suse | — | Upgrade qemuUpgrade xen-tools-xendomains-wait-diskUpgrade xen-toolsUpgrade qemu-audio-ossUpgrade xen-libs-32bitUpgrade qemu-block-sshUpgrade qemu-hw-display-qxlUpgrade qemu-seabiosUpgrade qemu-audio-spiceUpgrade xen-kmp-paeUpgrade qemu-skibootUpgrade qemu-ksmUpgrade qemu-ipxeUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpuUpgrade xen-develUpgrade qemu-block-iscsiUpgrade qemu-chardev-spiceUpgrade qemu-ui-openglUpgrade qemu-guest-agentUpgrade xen-libsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-spice-appUpgrade qemu-armUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-langUpgrade qemu-ui-spice-coreUpgrade xen-tools-domUUpgrade xen-doc-htmlUpgrade xen-kmp-defaultUpgrade qemu-s390xUpgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade kvmUpgrade qemu-vgabiosUpgrade qemu-chardev-baumUpgrade qemu-ui-cursesUpgrade qemu-toolsUpgrade qemu-sgabiosUpgrade qemu-x86Upgrade qemu-s390Upgrade qemu-hw-usb-redirectUpgrade qemu-ppcUpgrade qemu-block-curlUpgrade qemu-microvmUpgrade xenUpgrade qemu-kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-gtk | Mar 28, 2016 | Feb 3, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-arm | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub