The (1) mptsas_config_manufacturing_1 and (2) mptsas_config_ioc_0 functions in hw/scsi/mptconfig.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via vectors involving MPTSAS_CONFIG_PACK.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 10, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Suse | — | Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-chardev-spiceUpgrade qemu-ui-spice-appUpgrade qemu-langUpgrade qemu-ui-openglUpgrade qemuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ppcUpgrade qemu-x86Upgrade qemu-audio-ossUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-sshUpgrade qemu-sgabiosUpgrade qemu-hw-display-qxlUpgrade qemu-armUpgrade qemu-toolsUpgrade qemu-guest-agentUpgrade qemu-s390xUpgrade qemu-chardev-baumUpgrade qemu-ksmUpgrade qemu-ui-spice-coreUpgrade qemu-ui-cursesUpgrade qemu-skibootUpgrade qemu-audio-spiceUpgrade qemu-vgabiosUpgrade qemu-block-curlUpgrade qemu-seabiosUpgrade qemu-ui-gtkUpgrade qemu-kvmUpgrade qemu-s390Upgrade qemu-microvmUpgrade qemu-ipxeUpgrade qemu-audio-alsaUpgrade qemu-hw-usb-redirectUpgrade qemu-block-iscsi | Dec 9, 2016 | Dec 9, 2016 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-kvmUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-s390x | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub