The mptsas_process_scsi_io_request function in QEMU (aka Quick Emulator), when built with LSI SAS1068 Host Bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors involving MPTSASRequest objects.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Oct 10, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Oct 10, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 15, 2016 |
| Suse | — | Upgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-ossUpgrade qemu-ipxeUpgrade qemu-toolsUpgrade qemu-audio-spiceUpgrade qemu-block-sshUpgrade qemu-langUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-guest-agentUpgrade qemu-seabiosUpgrade qemu-s390xUpgrade qemu-block-rbdUpgrade qemu-chardev-spiceUpgrade qemu-armUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-openglUpgrade qemu-block-iscsiUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade qemu-ksmUpgrade qemu-x86Upgrade qemu-ui-cursesUpgrade qemu-audio-alsaUpgrade qemu-s390Upgrade qemu-ui-gtkUpgrade qemu-microvmUpgrade qemu-hw-usb-redirectUpgrade qemu-sgabiosUpgrade qemu-ppcUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-curlUpgrade qemu-ui-spice-coreUpgrade qemu-chardev-baumUpgrade qemu-kvmUpgrade qemu-audio-paUpgrade qemu-vgabios | Jul 21, 2017 | Oct 10, 2016 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-kvmUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-mips | Nov 9, 2016 | Oct 10, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub