The (1) mptsas_config_manufacturing_1 and (2) mptsas_config_ioc_0 functions in hw/scsi/mptconfig.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via vectors involving MPTSAS_CONFIG_PACK.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 10, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Suse | — | Upgrade qemu-hw-usb-redirectUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-coreUpgrade qemu-ui-cursesUpgrade qemu-seabiosUpgrade qemu-microvmUpgrade qemu-s390Upgrade qemu-ui-gtkUpgrade qemu-skibootUpgrade qemu-kvmUpgrade qemu-ipxeUpgrade qemu-audio-alsaUpgrade qemu-block-iscsiUpgrade qemu-ksmUpgrade qemu-block-curlUpgrade qemu-vgabiosUpgrade qemu-audio-spiceUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-qxlUpgrade qemu-langUpgrade qemu-sgabiosUpgrade qemu-armUpgrade qemu-block-rbdUpgrade qemu-toolsUpgrade qemu-block-sshUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-spice-appUpgrade qemu-x86Upgrade qemu-ui-openglUpgrade qemu-audio-paUpgrade qemuUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ppc | Dec 9, 2016 | Dec 9, 2016 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-ppc | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub