The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Sep 2, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Sep 2, 2016 |
| Suse | — | Upgrade qemu-sgabiosUpgrade xen-kmp-paeUpgrade qemu-block-sshUpgrade qemu-kvmUpgrade xen-kmp-defaultUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-chardev-baumUpgrade qemu-audio-spiceUpgrade qemu-ui-cursesUpgrade xen-libsUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-vgabiosUpgrade xen-libs-32bitUpgrade qemu-s390xUpgrade xen-doc-htmlUpgrade qemu-seabiosUpgrade xen-toolsUpgrade qemu-chardev-spiceUpgrade qemu-ui-spice-appUpgrade qemu-ipxeUpgrade qemu-s390Upgrade qemu-ksmUpgrade qemu-block-rbdUpgrade qemu-toolsUpgrade xen-develUpgrade qemu-guest-agentUpgrade qemu-hw-usb-redirectUpgrade xen-tools-domUUpgrade qemu-armUpgrade qemu-audio-paUpgrade xenUpgrade qemu-langUpgrade qemu-microvmUpgrade kvmUpgrade qemu-ui-gtkUpgrade qemu-hw-display-virtio-gpuUpgrade qemuUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-iscsiUpgrade qemu-hw-display-qxlUpgrade qemu-ui-openglUpgrade qemu-audio-ossUpgrade qemu-x86Upgrade qemu-ui-spice-coreUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-skiboot | Aug 26, 2016 | Aug 17, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-ppc | Aug 12, 2016 | Aug 12, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub