The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Sep 2, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Sep 2, 2016 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade qemu-kvmUpgrade qemu-s390xUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-libs-32bitUpgrade xen-doc-htmlUpgrade qemu-ui-spice-appUpgrade qemu-ksmUpgrade xen-toolsUpgrade xen-kmp-paeUpgrade qemu-block-curlUpgrade qemu-block-sshUpgrade qemu-ipxeUpgrade qemu-s390Upgrade qemu-block-rbdUpgrade qemu-seabiosUpgrade qemu-audio-alsaUpgrade qemu-chardev-baumUpgrade qemu-chardev-spiceUpgrade qemu-audio-spiceUpgrade qemu-ui-cursesUpgrade xen-libsUpgrade qemu-sgabiosUpgrade qemu-vgabiosUpgrade qemu-audio-paUpgrade qemu-block-iscsiUpgrade qemu-ui-gtkUpgrade qemu-langUpgrade qemu-armUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-microvmUpgrade kvmUpgrade xenUpgrade qemu-hw-display-qxlUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ppcUpgrade qemuUpgrade qemu-toolsUpgrade qemu-skibootUpgrade xen-develUpgrade qemu-ui-spice-coreUpgrade qemu-x86Upgrade qemu-ui-openglUpgrade qemu-guest-agentUpgrade xen-tools-domUUpgrade qemu-hw-usb-redirect | Aug 26, 2016 | Aug 17, 2016 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-kvmUpgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system | Aug 12, 2016 | Aug 12, 2016 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub