The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Jun 14, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 14, 2016 |
| Suse | — | Upgrade qemu-ui-gtkUpgrade qemu-ui-cursesUpgrade qemu-microvmUpgrade qemu-kvmUpgrade qemu-s390Upgrade qemu-chardev-baumUpgrade qemu-block-rbdUpgrade qemu-hw-usb-redirectUpgrade qemu-ksmUpgrade qemu-s390xUpgrade xen-kmp-defaultUpgrade qemu-audio-paUpgrade xen-tools-domUUpgrade xenUpgrade qemu-block-curlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-coreUpgrade qemu-vgabiosUpgrade qemu-audio-alsaUpgrade qemu-x86Upgrade qemu-sgabiosUpgrade qemu-ppcUpgrade qemu-ui-openglUpgrade xen-doc-htmlUpgrade qemu-block-sshUpgrade qemu-armUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-vgaUpgrade kvmUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-spiceUpgrade qemuUpgrade qemu-ipxeUpgrade qemu-langUpgrade xen-develUpgrade qemu-ui-spice-appUpgrade xen-kmp-paeUpgrade xen-libs-32bitUpgrade qemu-audio-ossUpgrade qemu-guest-agentUpgrade xen-libsUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-qxlUpgrade xen-toolsUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpu | Aug 26, 2016 | Jun 14, 2016 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-misc | Aug 6, 2016 | Jun 14, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub