Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service (QEMU instance crash) via a crafted SCSI controller CTRL_GET_INFO command.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 9, 2016 | Feb 3, 2016 |
| Freebsd | — | Upgrade qemu-develUpgrade qemu-sbrunoUpgrade qemuUpgrade qemu-user-static | Dec 10, 2025 | Jan 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Apr 11, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Dec 4, 2019 | Apr 11, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Apr 11, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2015 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade qemu-toolsUpgrade qemu-sgabiosUpgrade xen-doc-htmlUpgrade qemu-chardev-baumUpgrade qemu-audio-alsaUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-cursesUpgrade kvmUpgrade qemu-audio-paUpgrade qemu-kvmUpgrade qemu-microvmUpgrade qemu-ui-gtkUpgrade qemu-s390xUpgrade xen-tools-domUUpgrade qemu-vgabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-s390Upgrade xenUpgrade qemu-x86Upgrade qemu-ppcUpgrade qemu-block-curlUpgrade qemu-block-rbdUpgrade qemu-ksmUpgrade xen-tools-xendomains-wait-diskUpgrade xen-libs-32bitUpgrade qemu-ipxeUpgrade qemu-armUpgrade qemu-ui-spice-coreUpgrade qemu-langUpgrade xen-develUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-guest-agentUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemuUpgrade qemu-ui-openglUpgrade xen-kmp-paeUpgrade qemu-block-iscsiUpgrade xen-libsUpgrade qemu-block-sshUpgrade qemu-audio-spiceUpgrade xen-toolsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-skibootUpgrade qemu-chardev-spiceUpgrade qemu-audio-oss | Mar 28, 2016 | Feb 3, 2016 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-mips | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub