Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) via MegaRAID Firmware Interface (MFI) commands with the sglist size set to a value over 2 Gb.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Mar 16, 2017 |
| Debian | — | Upgrade qemu | Feb 19, 2019 | Mar 16, 2017 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Mar 16, 2017 |
| Suse | — | Upgrade xen-tools-domUUpgrade qemu-ui-cursesUpgrade xen-kmp-paeUpgrade qemu-audio-alsaUpgrade xenUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-guest-agentUpgrade qemu-seabiosUpgrade qemu-ksmUpgrade qemu-langUpgrade qemu-ui-gtkUpgrade qemu-ppcUpgrade qemu-x86Upgrade qemu-kvmUpgrade qemu-ui-spice-coreUpgrade qemu-block-curlUpgrade qemu-chardev-baumUpgrade qemu-microvmUpgrade qemu-audio-paUpgrade qemu-s390Upgrade qemu-hw-usb-redirectUpgrade qemu-block-iscsiUpgrade qemu-vgabiosUpgrade xen-doc-htmlUpgrade xen-libsUpgrade qemu-skibootUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-qxlUpgrade qemu-chardev-spiceUpgrade qemu-armUpgrade xen-toolsUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-toolsUpgrade qemu-sgabiosUpgrade qemu-block-rbdUpgrade qemu-audio-ossUpgrade kvmUpgrade xen-libs-32bitUpgrade qemu-ui-spice-appUpgrade qemu-s390xUpgrade qemuUpgrade xen-develUpgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-sshUpgrade qemu-audio-spiceUpgrade qemu-ipxeUpgrade qemu-ui-opengl | Feb 28, 2017 | Feb 27, 2017 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-s390x | Apr 21, 2017 | Feb 27, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub