The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Jun 14, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 14, 2016 |
| Suse | — | Upgrade xen-toolsUpgrade xen-doc-htmlUpgrade xen-kmp-paeUpgrade qemu-armUpgrade qemu-audio-ossUpgrade qemu-chardev-spiceUpgrade qemu-langUpgrade xen-libsUpgrade xen-libs-32bitUpgrade qemu-seabiosUpgrade kvmUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-sshUpgrade qemu-ui-openglUpgrade qemuUpgrade qemu-ui-spice-appUpgrade xen-develUpgrade qemu-audio-spiceUpgrade qemu-skibootUpgrade qemu-hw-display-qxlUpgrade qemu-ipxeUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-toolsUpgrade qemu-ppcUpgrade qemu-ksmUpgrade qemu-hw-usb-redirectUpgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-ui-cursesUpgrade qemu-audio-paUpgrade qemu-ui-spice-coreUpgrade qemu-x86Upgrade qemu-kvmUpgrade xen-kmp-defaultUpgrade qemu-sgabiosUpgrade qemu-vgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-gtkUpgrade qemu-s390Upgrade xenUpgrade qemu-block-rbdUpgrade xen-tools-domUUpgrade qemu-microvmUpgrade qemu-chardev-baumUpgrade qemu-block-curlUpgrade qemu-s390x | Aug 26, 2016 | Jun 14, 2016 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-kvmUpgrade qemu-system-arm | Aug 6, 2016 | Jun 14, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub