QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 19, 2019 | Jun 16, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Nov 19, 2019 | Jun 16, 2017 |
| Oracle_linux | — | Upgrade ivshmem-toolsUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86Upgrade qemu-block-iscsiUpgrade qemuUpgrade qemu-block-glusterUpgrade qemu-system-aarch64Upgrade qemu-block-rbdUpgrade qemu-imgUpgrade qemu-commonUpgrade qemu-system-x86-coreUpgrade qemu-kvmUpgrade qemu-kvm-core | May 15, 2019 | May 10, 2017 |
| Suse | — | Upgrade qemu-sgabiosUpgrade qemu-armUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-usb-redirectUpgrade xen-toolsUpgrade qemu-s390xUpgrade qemu-hw-display-qxlUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpu-pciUpgrade kvmUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-toolsUpgrade qemu-audio-ossUpgrade xen-develUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-paUpgrade qemu-ppcUpgrade qemu-ui-openglUpgrade qemu-x86Upgrade qemu-guest-agentUpgrade qemuUpgrade xen-kmp-paeUpgrade qemu-audio-alsaUpgrade qemu-skibootUpgrade qemu-block-curlUpgrade xenUpgrade qemu-s390Upgrade qemu-ipxeUpgrade qemu-kvmUpgrade qemu-seabiosUpgrade qemu-vgabiosUpgrade qemu-microvmUpgrade xen-doc-htmlUpgrade xen-tools-domUUpgrade qemu-chardev-spiceUpgrade xen-libs-32bitUpgrade qemu-ksmUpgrade qemu-audio-spiceUpgrade qemu-ui-gtkUpgrade qemu-ui-cursesUpgrade qemu-chardev-baumUpgrade xen-libsUpgrade xen-kmp-defaultUpgrade qemu-ui-spice-coreUpgrade qemu-ui-spice-appUpgrade qemu-block-iscsi | Jul 4, 2017 | Jun 16, 2017 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-aarch64 | Sep 13, 2017 | Jun 16, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub