The mptsas_fetch_requests function in hw/scsi/mptsas.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop, and CPU consumption or QEMU process crash) via vectors involving s->state.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 10, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 24, 2016 |
| Suse | — | Upgrade qemu-ui-gtkUpgrade qemu-ui-spice-coreUpgrade qemu-seabiosUpgrade qemu-block-sshUpgrade qemu-audio-spiceUpgrade qemu-s390Upgrade qemu-ksmUpgrade qemu-kvmUpgrade qemu-langUpgrade qemu-ui-cursesUpgrade qemu-skibootUpgrade qemu-microvmUpgrade qemu-block-iscsiUpgrade qemu-vgabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-chardev-baumUpgrade qemu-s390xUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-audio-ossUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-qxlUpgrade qemu-armUpgrade qemu-audio-paUpgrade qemuUpgrade qemu-ui-openglUpgrade qemu-sgabiosUpgrade qemu-ppcUpgrade qemu-toolsUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-x86Upgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-gpu-pci | Dec 9, 2016 | Dec 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub