The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | May 20, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | May 20, 2016 |
| Suse | — | Upgrade qemu-chardev-baumUpgrade qemu-audio-spiceUpgrade xen-libs-32bitUpgrade xen-libsUpgrade qemu-ui-spice-coreUpgrade xen-toolsUpgrade qemu-chardev-spiceUpgrade qemu-guest-agentUpgrade qemu-langUpgrade qemu-ipxeUpgrade qemu-s390xUpgrade qemu-hw-display-qxlUpgrade qemu-kvmUpgrade xen-tools-domuUpgrade qemu-audio-alsaUpgrade qemu-ui-spice-appUpgrade xen-doc-pdfUpgrade qemu-block-iscsiUpgrade qemu-ppcUpgrade qemuUpgrade xen-kmp-paeUpgrade qemu-block-sshUpgrade qemu-block-curlUpgrade qemu-ui-gtkUpgrade xen-develUpgrade qemu-ui-openglUpgrade qemu-hw-usb-redirectUpgrade qemu-block-rbdUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-ossUpgrade qemu-armUpgrade qemu-s390Upgrade xen-tools-xendomains-wait-diskUpgrade kvmUpgrade qemu-microvmUpgrade xen-doc-htmlUpgrade qemu-sgabiosUpgrade qemu-audio-paUpgrade xenUpgrade qemu-ui-cursesUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu-ksmUpgrade qemu-hw-display-virtio-vgaUpgrade xen-kmp-traceUpgrade qemu-skibootUpgrade qemu-seabiosUpgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-gpu | Jun 13, 2016 | May 20, 2016 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-mips | Aug 6, 2016 | May 20, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub