The (1) mptsas_config_manufacturing_1 and (2) mptsas_config_ioc_0 functions in hw/scsi/mptconfig.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via vectors involving MPTSAS_CONFIG_PACK.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Dec 10, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Suse | — | Upgrade qemu-ipxeUpgrade qemu-block-iscsiUpgrade qemu-kvmUpgrade qemu-ui-cursesUpgrade qemu-chardev-baumUpgrade qemu-audio-spiceUpgrade qemu-audio-alsaUpgrade qemu-ui-spice-coreUpgrade qemu-hw-usb-redirectUpgrade qemu-s390xUpgrade qemu-skibootUpgrade qemu-microvmUpgrade qemu-ksmUpgrade qemu-s390Upgrade qemu-block-curlUpgrade qemu-seabiosUpgrade qemu-vgabiosUpgrade qemu-ui-gtkUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-langUpgrade qemu-x86Upgrade qemu-hw-display-virtio-vgaUpgrade qemuUpgrade qemu-armUpgrade qemu-sgabiosUpgrade qemu-block-rbdUpgrade qemu-audio-ossUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ppcUpgrade qemu-chardev-spiceUpgrade qemu-toolsUpgrade qemu-hw-display-qxlUpgrade qemu-guest-agentUpgrade qemu-ui-openglUpgrade qemu-ui-spice-appUpgrade qemu-audio-pa | Dec 9, 2016 | Dec 9, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-aarch64 | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub