Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) via MegaRAID Firmware Interface (MFI) commands with the sglist size set to a value over 2 Gb.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Mar 16, 2017 |
| Debian | — | Upgrade qemu | Feb 19, 2019 | Mar 16, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 16, 2017 |
| Suse | — | Upgrade qemu-block-iscsiUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-tools-domuUpgrade xen-kmp-paeUpgrade xenUpgrade qemu-vgabiosUpgrade qemu-langUpgrade qemu-ksmUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-chardev-baumUpgrade qemu-x86Upgrade qemu-s390Upgrade qemu-microvmUpgrade qemu-hw-usb-redirectUpgrade qemu-seabiosUpgrade qemu-ui-cursesUpgrade qemu-audio-alsaUpgrade qemu-ppcUpgrade qemu-ui-gtkUpgrade qemu-audio-paUpgrade qemu-block-curlUpgrade qemu-ui-spice-coreUpgrade qemu-ui-openglUpgrade xen-toolsUpgrade qemu-chardev-spiceUpgrade qemu-ipxeUpgrade qemu-block-sshUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-kmp-defaultUpgrade xen-develUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-ossUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-vgaUpgrade xen-libsUpgrade qemu-skibootUpgrade qemu-hw-display-qxlUpgrade xen-libs-32bitUpgrade qemu-armUpgrade qemu-audio-spiceUpgrade qemu-block-rbdUpgrade qemu-sgabiosUpgrade qemuUpgrade qemu-toolsUpgrade qemu-s390xUpgrade kvmUpgrade xen-doc-html | Feb 28, 2017 | Feb 27, 2017 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system | Apr 21, 2017 | Feb 27, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub