The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | May 20, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | May 20, 2016 |
| Suse | — | Upgrade qemu-ui-openglUpgrade qemu-ppcUpgrade qemu-audio-alsaUpgrade qemu-block-iscsiUpgrade qemu-kvmUpgrade qemu-ui-spice-coreUpgrade qemu-audio-spiceUpgrade xen-libsUpgrade qemu-block-curlUpgrade qemu-ui-spice-appUpgrade xen-kmp-paeUpgrade qemu-chardev-baumUpgrade xen-libs-32bitUpgrade xen-toolsUpgrade xen-develUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-doc-pdfUpgrade qemu-block-sshUpgrade qemu-s390xUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-gtkUpgrade qemu-ipxeUpgrade qemuUpgrade qemu-chardev-spiceUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-qxlUpgrade qemu-toolsUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-armUpgrade qemu-ksmUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-x86Upgrade xen-kmp-traceUpgrade qemu-vgabiosUpgrade xen-tools-domUUpgrade xen-kmp-defaultUpgrade qemu-ui-cursesUpgrade qemu-sgabiosUpgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade qemu-microvmUpgrade xen-doc-htmlUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-gpuUpgrade kvmUpgrade xenUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-s390Upgrade qemu-skiboot | Jun 13, 2016 | May 20, 2016 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-kvmUpgrade qemu-system-aarch64 | Aug 6, 2016 | May 20, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub