The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Jun 14, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 14, 2016 |
| Suse | — | Upgrade qemu-block-sshUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-seabiosUpgrade qemu-ui-openglUpgrade kvmUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-skibootUpgrade qemu-ppcUpgrade qemu-ipxeUpgrade qemu-ui-spice-appUpgrade xen-develUpgrade qemu-chardev-spiceUpgrade xen-libs-32bitUpgrade xen-toolsUpgrade qemu-langUpgrade xen-libsUpgrade qemu-audio-spiceUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-armUpgrade qemu-guest-agentUpgrade xen-doc-htmlUpgrade qemu-hw-display-qxlUpgrade xen-kmp-paeUpgrade qemu-block-rbdUpgrade qemu-ksmUpgrade qemu-kvmUpgrade qemu-ui-cursesUpgrade qemu-ui-spice-coreUpgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade qemu-x86Upgrade qemu-hw-usb-redirectUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-gtkUpgrade xenUpgrade qemu-microvmUpgrade xen-tools-domUUpgrade qemu-block-curlUpgrade qemu-s390Upgrade xen-kmp-defaultUpgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade qemu-audio-paUpgrade qemu-audio-alsaUpgrade qemu-s390x | Aug 26, 2016 | Jun 14, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-mips | Aug 6, 2016 | Jun 14, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub