The (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allow local guest OS administrators to cause a denial of service (QEMU process crash) or execute arbitrary code on the QEMU host via vectors related to the information transfer buffer.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Jun 14, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 14, 2016 |
| Suse | — | Upgrade qemu-audio-ossUpgrade xen-kmp-paeUpgrade qemu-ui-openglUpgrade qemu-armUpgrade xen-toolsUpgrade qemu-hw-display-virtio-gpuUpgrade xen-libsUpgrade qemu-skibootUpgrade qemu-langUpgrade qemu-hw-display-qxlUpgrade xen-doc-pdfUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-seabiosUpgrade qemu-block-sshUpgrade qemu-ipxeUpgrade qemu-chardev-spiceUpgrade qemu-guest-agentUpgrade qemu-block-iscsiUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-ui-spice-appUpgrade xen-libs-32bitUpgrade qemu-ppcUpgrade qemuUpgrade xen-develUpgrade qemu-toolsUpgrade qemu-audio-spiceUpgrade qemu-sgabiosUpgrade xen-doc-htmlUpgrade xen-kmp-traceUpgrade xen-tools-domUUpgrade qemu-chardev-baumUpgrade qemu-hw-usb-redirectUpgrade kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-rbdUpgrade qemu-s390xUpgrade qemu-ui-cursesUpgrade xen-kmp-defaultUpgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-block-curlUpgrade qemu-ksmUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade qemu-microvmUpgrade qemu-ui-gtkUpgrade qemu-x86Upgrade qemu-s390Upgrade qemu-ui-spice-coreUpgrade xen | Aug 26, 2016 | Jun 14, 2016 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system | Aug 6, 2016 | Jun 14, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub