The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Sep 2, 2016 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-ossUpgrade xen-tools-domUUpgrade qemu-x86Upgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-ui-openglUpgrade qemu-armUpgrade xen-kmp-paeUpgrade qemu-audio-paUpgrade xen-doc-htmlUpgrade qemu-microvmUpgrade qemu-s390Upgrade qemu-audio-alsaUpgrade qemu-ui-cursesUpgrade qemu-ksmUpgrade qemu-skibootUpgrade qemu-seabiosUpgrade qemu-kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xenUpgrade xen-libs-32bitUpgrade qemu-ipxeUpgrade qemu-vgabiosUpgrade xen-libsUpgrade qemu-block-rbdUpgrade qemu-s390xUpgrade qemu-sgabiosUpgrade xen-toolsUpgrade qemu-hw-usb-redirectUpgrade qemuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-gpuUpgrade kvmUpgrade qemu-toolsUpgrade qemu-audio-spiceUpgrade qemu-langUpgrade qemu-ui-spice-appUpgrade qemu-ui-spice-coreUpgrade qemu-block-sshUpgrade qemu-guest-agentUpgrade qemu-hw-display-qxlUpgrade qemu-block-iscsiUpgrade qemu-chardev-spiceUpgrade qemu-ppcUpgrade qemu-chardev-baumUpgrade xen-devel | Aug 26, 2016 | Aug 17, 2016 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-mipsUpgrade qemu-system-misc | Aug 12, 2016 | Aug 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub