The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of service (out-of-bounds write access) via vectors involving a MegaRAID Firmware Interface (MFI) command.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Sep 2, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Sep 2, 2016 |
| Suse | — | Upgrade qemu-block-sshUpgrade qemu-guest-agentUpgrade qemu-ipxeUpgrade qemu-seabiosUpgrade qemuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-ossUpgrade xen-libsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-vgaUpgrade xen-toolsUpgrade qemu-ui-cursesUpgrade qemu-ui-openglUpgrade qemu-chardev-spiceUpgrade qemu-langUpgrade qemu-audio-spiceUpgrade qemu-skibootUpgrade xen-develUpgrade qemu-block-iscsiUpgrade xen-kmp-paeUpgrade qemu-armUpgrade qemu-hw-display-qxlUpgrade qemu-toolsUpgrade qemu-ppcUpgrade qemu-ui-gtkUpgrade qemu-s390Upgrade qemu-block-curlUpgrade xenUpgrade qemu-audio-paUpgrade qemu-s390xUpgrade qemu-microvmUpgrade qemu-chardev-baumUpgrade qemu-block-rbdUpgrade qemu-audio-alsaUpgrade qemu-sgabiosUpgrade qemu-ui-spice-coreUpgrade qemu-hw-usb-redirectUpgrade xen-doc-htmlUpgrade qemu-kvmUpgrade qemu-x86Upgrade kvmUpgrade qemu-vgabiosUpgrade qemu-ksmUpgrade xen-libs-32bitUpgrade xen-tools-domUUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-kmp-default | Aug 26, 2016 | Aug 17, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-kvmUpgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-aarch64Upgrade qemu-system-s390x | Aug 12, 2016 | Aug 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub