The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of service (out-of-bounds write access) via vectors involving a MegaRAID Firmware Interface (MFI) command.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Sep 2, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Sep 2, 2016 |
| Suse | — | Upgrade qemu-ui-spice-coreUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xenUpgrade qemu-hw-usb-redirectUpgrade qemu-chardev-baumUpgrade qemu-microvmUpgrade xen-libs-32bitUpgrade qemu-audio-paUpgrade xen-tools-domUUpgrade qemu-kvmUpgrade qemu-block-curlUpgrade xen-kmp-defaultUpgrade qemu-s390xUpgrade qemu-audio-alsaUpgrade qemu-sgabiosUpgrade qemu-vgabiosUpgrade qemu-block-rbdUpgrade qemu-ksmUpgrade qemu-s390Upgrade xen-doc-htmlUpgrade qemu-ui-gtkUpgrade qemu-x86Upgrade kvmUpgrade qemu-langUpgrade qemu-skibootUpgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-vgaUpgrade xen-libsUpgrade qemu-toolsUpgrade qemu-ppcUpgrade qemuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ipxeUpgrade xen-develUpgrade xen-kmp-paeUpgrade qemu-guest-agentUpgrade qemu-block-sshUpgrade qemu-ui-openglUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-qxlUpgrade qemu-chardev-spiceUpgrade qemu-armUpgrade qemu-seabiosUpgrade qemu-ui-spice-appUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade xen-tools | Aug 26, 2016 | Aug 17, 2016 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-x86 | Aug 12, 2016 | Aug 12, 2016 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub