The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or potentially execute arbitrary code on the QEMU host via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | May 20, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | May 20, 2016 |
| Suse | — | Upgrade qemu-chardev-baumUpgrade qemuUpgrade xen-kmp-traceUpgrade qemu-toolsUpgrade qemu-x86Upgrade xen-tools-domUUpgrade xen-doc-htmlUpgrade kvmUpgrade xen-develUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-paUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-qxlUpgrade qemu-sgabiosUpgrade qemu-ui-cursesUpgrade xenUpgrade qemu-vgabiosUpgrade qemu-microvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-kvmUpgrade xen-kmp-defaultUpgrade xen-toolsUpgrade qemu-ppcUpgrade qemu-ui-spice-appUpgrade qemu-guest-agentUpgrade qemu-ipxeUpgrade qemu-armUpgrade xen-libsUpgrade qemu-hw-display-virtio-vgaUpgrade xen-kmp-paeUpgrade qemu-audio-spiceUpgrade qemu-block-iscsiUpgrade xen-libs-32bitUpgrade qemu-block-rbdUpgrade qemu-skibootUpgrade qemu-audio-ossUpgrade qemu-ksmUpgrade qemu-ui-spice-coreUpgrade qemu-chardev-spiceUpgrade qemu-ui-openglUpgrade qemu-s390Upgrade xen-doc-pdfUpgrade qemu-audio-alsaUpgrade qemu-s390xUpgrade qemu-ui-gtkUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-block-sshUpgrade qemu-block-curlUpgrade qemu-hw-usb-redirectUpgrade qemu-langUpgrade qemu-seabios | Jun 13, 2016 | May 20, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-kvmUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-aarch64 | Aug 6, 2016 | May 20, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub