QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds array access) via vectors related to the (1) PVSCSI_CMD_SETUP_RINGS or (2) PVSCSI_CMD_SETUP_MSG_RING SCSI command.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Sep 2, 2016 |
| Suse | — | Upgrade xen-libsUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-spice-appUpgrade qemu-guest-agentUpgrade qemu-ui-cursesUpgrade qemu-toolsUpgrade qemu-skibootUpgrade qemu-audio-ossUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-armUpgrade qemu-audio-paUpgrade qemu-hw-display-qxlUpgrade xen-develUpgrade qemuUpgrade qemu-x86Upgrade xen-toolsUpgrade xen-kmp-paeUpgrade qemu-seabiosUpgrade qemu-ipxeUpgrade qemu-ksmUpgrade qemu-sgabiosUpgrade xen-tools-domUUpgrade qemu-microvmUpgrade qemu-chardev-baumUpgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemu-ui-gtkUpgrade qemu-vgabiosUpgrade qemu-block-sshUpgrade qemu-s390xUpgrade xenUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-curlUpgrade xen-kmp-defaultUpgrade qemu-audio-alsaUpgrade xen-libs-32bitUpgrade qemu-langUpgrade qemu-audio-spiceUpgrade qemu-ui-spice-coreUpgrade xen-doc-htmlUpgrade qemu-kvmUpgrade qemu-s390 | Jun 13, 2016 | Jun 13, 2016 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-s390x | Aug 12, 2016 | Aug 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub