The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | May 20, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | May 20, 2016 |
| Suse | — | Upgrade xen-kmp-traceUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-paUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-armUpgrade qemu-s390Upgrade xen-doc-htmlUpgrade qemu-microvmUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-skibootUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade kvmUpgrade xenUpgrade qemu-ksmUpgrade xen-kmp-defaultUpgrade qemu-audio-ossUpgrade qemu-seabiosUpgrade xen-libsUpgrade qemu-audio-spiceUpgrade qemu-chardev-baumUpgrade xen-kmp-paeUpgrade xen-toolsUpgrade xen-doc-pdfUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ppcUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-audio-alsaUpgrade qemu-ui-openglUpgrade qemu-toolsUpgrade qemu-block-iscsiUpgrade qemu-ipxeUpgrade qemu-ui-spice-appUpgrade qemu-ui-spice-coreUpgrade qemu-hw-usb-redirectUpgrade xen-libs-32bitUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-sshUpgrade xen-tools-domuUpgrade qemu-block-curlUpgrade qemu-s390xUpgrade xen-develUpgrade qemu-langUpgrade qemuUpgrade qemu-ui-gtkUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-qxl | Jun 13, 2016 | May 20, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-ppc | Aug 6, 2016 | May 20, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub