Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service (QEMU instance crash) via a crafted SCSI controller CTRL_GET_INFO command.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 9, 2016 | Feb 3, 2016 |
| Freebsd | — | Upgrade qemu-user-staticUpgrade qemuUpgrade qemu-sbrunoUpgrade qemu-devel | Dec 10, 2025 | Jan 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Apr 11, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 4, 2019 | Apr 11, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | Apr 11, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2015 |
| Suse | — | Upgrade qemu-langUpgrade qemuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-armUpgrade qemu-audio-ossUpgrade qemu-ui-spice-appUpgrade qemu-ui-spice-coreUpgrade qemu-guest-agentUpgrade qemu-ui-openglUpgrade xen-kmp-paeUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-qxlUpgrade qemu-seabiosUpgrade xen-libsUpgrade qemu-block-rbdUpgrade qemu-audio-spiceUpgrade qemu-block-sshUpgrade xen-develUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-chardev-spiceUpgrade qemu-ksmUpgrade xen-libs-32bitUpgrade qemu-skibootUpgrade xen-tools-domuUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-ipxeUpgrade xen-toolsUpgrade qemu-block-iscsiUpgrade qemu-vgabiosUpgrade kvmUpgrade qemu-ui-gtkUpgrade qemu-s390xUpgrade xen-kmp-defaultUpgrade qemu-sgabiosUpgrade qemu-ui-cursesUpgrade xen-doc-htmlUpgrade qemu-kvmUpgrade qemu-microvmUpgrade qemu-audio-alsaUpgrade qemu-chardev-baumUpgrade qemu-s390Upgrade qemu-ppcUpgrade xenUpgrade qemu-audio-paUpgrade qemu-hw-usb-redirectUpgrade qemu-x86Upgrade qemu-toolsUpgrade qemu-block-curlUpgrade qemu-hw-s390x-virtio-gpu-ccw | Mar 28, 2016 | Feb 3, 2016 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-aarch64 | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub