The mptsas_process_scsi_io_request function in QEMU (aka Quick Emulator), when built with LSI SAS1068 Host Bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors involving MPTSASRequest objects.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Oct 10, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Oct 10, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 15, 2016 |
| Suse | — | Upgrade qemu-kvmUpgrade qemu-audio-paUpgrade qemu-ui-gtkUpgrade qemu-ui-cursesUpgrade qemu-audio-alsaUpgrade qemu-ppcUpgrade qemu-s390Upgrade qemu-sgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-microvmUpgrade qemu-hw-usb-redirectUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu-ksmUpgrade qemu-chardev-baumUpgrade qemu-block-curlUpgrade qemu-ui-spice-coreUpgrade qemu-ui-spice-appUpgrade qemu-armUpgrade qemu-ipxeUpgrade qemu-chardev-spiceUpgrade qemu-toolsUpgrade qemu-block-iscsiUpgrade qemu-skibootUpgrade qemu-guest-agentUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-ossUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-openglUpgrade qemuUpgrade qemu-block-rbdUpgrade qemu-hw-display-qxlUpgrade qemu-audio-spiceUpgrade qemu-seabios | Jul 21, 2017 | Oct 10, 2016 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-kvmUpgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system | Nov 9, 2016 | Oct 10, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub