The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to reading from the information transfer buffer in non-DMA mode.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Jun 14, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 14, 2016 |
| Suse | — | Upgrade xen-kmp-defaultUpgrade qemu-s390xUpgrade qemu-s390Upgrade qemu-audio-spiceUpgrade qemu-chardev-spiceUpgrade qemu-ksmUpgrade xen-doc-pdfUpgrade qemu-ipxeUpgrade xen-doc-htmlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-kvmUpgrade qemu-audio-alsaUpgrade xen-libs-32bitUpgrade xen-kmp-paeUpgrade qemu-vgabiosUpgrade qemu-ui-spice-appUpgrade qemu-chardev-baumUpgrade qemu-block-curlUpgrade qemu-block-rbdUpgrade xen-toolsUpgrade qemu-block-sshUpgrade xen-libsUpgrade qemu-seabiosUpgrade xenUpgrade qemu-ui-gtkUpgrade qemu-audio-paUpgrade qemu-x86Upgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-spice-coreUpgrade xen-kmp-traceUpgrade qemu-audio-ossUpgrade qemu-ui-cursesUpgrade xen-tools-domUUpgrade qemu-hw-usb-redirectUpgrade qemu-microvmUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-langUpgrade qemu-guest-agentUpgrade qemu-sgabiosUpgrade xen-develUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-openglUpgrade qemu-armUpgrade qemu-block-iscsiUpgrade qemuUpgrade qemu-hw-display-qxlUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-vgaUpgrade kvm | Aug 26, 2016 | Jun 14, 2016 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-kvmUpgrade qemu-system-x86 | Aug 6, 2016 | Jun 14, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub