The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or potentially execute arbitrary code on the QEMU host via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | May 20, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | May 20, 2016 |
| Suse | — | Upgrade xen-kmp-traceUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade qemu-audio-paUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade kvmUpgrade qemu-x86Upgrade xen-doc-htmlUpgrade qemu-ui-cursesUpgrade qemu-vgabiosUpgrade xen-tools-domUUpgrade xen-kmp-defaultUpgrade xen-develUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-microvmUpgrade qemu-chardev-baumUpgrade qemu-kvmUpgrade qemu-toolsUpgrade xenUpgrade qemu-armUpgrade qemu-ksmUpgrade qemu-chardev-spiceUpgrade qemu-seabiosUpgrade qemu-audio-ossUpgrade qemu-skibootUpgrade qemu-audio-spiceUpgrade xen-kmp-paeUpgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-guest-agentUpgrade qemu-s390Upgrade xen-libs-32bitUpgrade qemu-ppcUpgrade qemu-ui-spice-coreUpgrade qemu-ui-openglUpgrade qemu-ui-spice-appUpgrade qemu-audio-alsaUpgrade qemu-hw-usb-redirectUpgrade qemu-block-sshUpgrade xen-tools-xendomains-wait-diskUpgrade xen-toolsUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-langUpgrade xen-libsUpgrade xen-doc-pdfUpgrade qemu-s390xUpgrade qemu-ui-gtk | Jun 13, 2016 | May 20, 2016 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-kvm | Aug 6, 2016 | May 20, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub