The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | May 20, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | May 20, 2016 |
| Suse | — | Upgrade qemu-skibootUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-ossUpgrade qemu-ui-cursesUpgrade xenUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-vgabiosUpgrade qemu-ksmUpgrade qemu-x86Upgrade qemu-audio-paUpgrade qemu-microvmUpgrade xen-doc-htmlUpgrade qemu-seabiosUpgrade xen-kmp-traceUpgrade qemu-sgabiosUpgrade kvmUpgrade xen-tools-domUUpgrade qemu-s390Upgrade qemu-armUpgrade xen-kmp-defaultUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-ipxeUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-toolsUpgrade qemu-ui-spice-appUpgrade qemu-ppcUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-libsUpgrade xen-kmp-paeUpgrade qemu-ui-openglUpgrade qemu-audio-alsaUpgrade xen-libs-32bitUpgrade qemu-kvmUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-coreUpgrade xen-doc-pdfUpgrade qemu-block-sshUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-qxlUpgrade qemu-s390xUpgrade xen-develUpgrade qemu-block-iscsiUpgrade qemu-langUpgrade qemu-ui-gtkUpgrade qemuUpgrade xen-toolsUpgrade qemu-block-curlUpgrade qemu-chardev-spiceUpgrade qemu-block-rbdUpgrade qemu-audio-spice | Jun 13, 2016 | May 20, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-x86 | Aug 6, 2016 | May 20, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub