The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Sep 2, 2016 |
| Suse | — | Upgrade qemu-ppcUpgrade xenUpgrade qemu-ipxeUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-coreUpgrade qemu-block-rbdUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-vgabiosUpgrade xen-toolsUpgrade xen-develUpgrade qemu-s390xUpgrade qemu-guest-agentUpgrade qemu-sgabiosUpgrade qemuUpgrade xen-libsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-usb-redirectUpgrade qemu-block-iscsiUpgrade xen-libs-32bitUpgrade kvmUpgrade qemu-chardev-spiceUpgrade qemu-kvmUpgrade qemu-langUpgrade qemu-block-sshUpgrade qemu-ui-spice-appUpgrade qemu-toolsUpgrade qemu-hw-display-qxlUpgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-gpuUpgrade xen-kmp-paeUpgrade qemu-audio-paUpgrade qemu-armUpgrade qemu-ui-openglUpgrade qemu-x86Upgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-ossUpgrade xen-tools-domUUpgrade qemu-seabiosUpgrade xen-kmp-defaultUpgrade xen-doc-htmlUpgrade qemu-ui-gtkUpgrade qemu-s390Upgrade qemu-skibootUpgrade qemu-audio-alsaUpgrade qemu-ui-cursesUpgrade qemu-microvmUpgrade qemu-ksmUpgrade qemu-block-curl | Aug 26, 2016 | Aug 17, 2016 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system-misc | Aug 12, 2016 | Aug 12, 2016 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub