The pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging an incorrect cast.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 20, 2019 | Dec 9, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Suse | — | Upgrade qemu-microvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-paUpgrade qemu-block-iscsiUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-armUpgrade qemu-ui-cursesUpgrade qemu-audio-ossUpgrade qemu-ksmUpgrade qemu-hw-display-qxlUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-openglUpgrade qemu-skibootUpgrade qemu-ui-spice-appUpgrade qemu-x86Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemuUpgrade qemu-s390Upgrade qemu-guest-agentUpgrade qemu-chardev-spiceUpgrade qemu-kvmUpgrade qemu-chardev-baumUpgrade qemu-ui-gtkUpgrade qemu-toolsUpgrade qemu-s390xUpgrade qemu-ui-spice-coreUpgrade qemu-ipxeUpgrade qemu-audio-alsaUpgrade qemu-vgabiosUpgrade qemu-audio-spiceUpgrade qemu-block-curlUpgrade qemu-ppcUpgrade qemu-langUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-sgabios | Nov 3, 2016 | Oct 21, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-s390x | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub