The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | May 20, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | May 20, 2016 |
| Suse | — | Upgrade qemu-toolsUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemuUpgrade xen-develUpgrade qemu-s390xUpgrade qemu-chardev-spiceUpgrade xen-libsUpgrade qemu-ui-openglUpgrade qemu-ipxeUpgrade qemu-block-rbdUpgrade qemu-ui-gtkUpgrade xen-kmp-paeUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-coreUpgrade qemu-audio-spiceUpgrade xen-doc-pdfUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-block-sshUpgrade qemu-ui-spice-appUpgrade qemu-ppcUpgrade xen-toolsUpgrade qemu-block-curlUpgrade qemu-langUpgrade qemu-hw-display-qxlUpgrade xen-libs-32bitUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-vgaUpgrade xen-kmp-traceUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade xen-tools-xendomains-wait-diskUpgrade qemu-seabiosUpgrade kvmUpgrade qemu-s390Upgrade xen-tools-domUUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-cursesUpgrade qemu-ksmUpgrade qemu-skibootUpgrade xen-kmp-defaultUpgrade qemu-armUpgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade xenUpgrade qemu-microvmUpgrade xen-doc-html | Jun 13, 2016 | May 20, 2016 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-x86 | Aug 6, 2016 | May 20, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub