In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | May 10, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade ivshmem-toolsUpgrade qemu-system-x86-coreUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-kvmUpgrade qemu-commonUpgrade qemu-block-glusterUpgrade qemu-imgUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-block-rbdUpgrade qemuUpgrade qemu-kvm-core | Dec 23, 2018 | Oct 25, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 21, 2019 |
| Suse | — | Upgrade qemu-linux-userUpgrade qemu-ppcUpgrade qemu-microvmUpgrade qemu-block-rbdUpgrade qemu-audio-paUpgrade qemu-testsuiteUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-langUpgrade qemu-ui-gtkUpgrade qemu-vgabiosUpgrade qemu-hw-usb-redirectUpgrade xenUpgrade qemu-ui-spice-coreUpgrade xen-kmp-paeUpgrade qemu-block-sshUpgrade qemu-chardev-baumUpgrade qemu-audio-alsaUpgrade qemu-s390Upgrade qemu-ksmUpgrade qemu-guest-agentUpgrade qemu-seabiosUpgrade qemu-block-curlUpgrade xen-toolsUpgrade qemu-kvmUpgrade qemu-skibootUpgrade qemu-extraUpgrade qemu-block-iscsiUpgrade qemu-chardev-spiceUpgrade qemu-audio-ossUpgrade qemu-toolsUpgrade xen-doc-htmlUpgrade qemu-ui-spice-appUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-glusterUpgrade qemu-armUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-spiceUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-libsUpgrade xen-develUpgrade xen-tools-domUUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade qemu-x86Upgrade qemu-ui-cursesUpgrade qemu-ui-openglUpgrade xen-libs-32bitUpgrade qemu-block-dmgUpgrade kvmUpgrade xen-kmp-default | Nov 27, 2018 | Nov 26, 2018 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-misc | Nov 30, 2018 | Nov 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub