In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | May 10, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade qemuUpgrade qemu-block-rbdUpgrade qemu-block-glusterUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-imgUpgrade qemu-commonUpgrade qemu-kvm-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86-coreUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade ivshmem-tools | Dec 23, 2018 | Oct 25, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 21, 2019 |
| Suse | — | Upgrade qemu-testsuiteUpgrade qemu-ppcUpgrade qemu-s390Upgrade qemu-microvmUpgrade qemu-kvmUpgrade qemu-ksmUpgrade qemu-linux-userUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-paUpgrade qemu-block-rbdUpgrade qemu-audio-alsaUpgrade qemu-extraUpgrade qemu-ui-gtkUpgrade qemu-chardev-baumUpgrade xenUpgrade qemu-langUpgrade qemu-guest-agentUpgrade qemu-hw-usb-redirectUpgrade qemu-block-iscsiUpgrade xen-toolsUpgrade qemu-vgabiosUpgrade qemu-skibootUpgrade qemu-ui-spice-coreUpgrade qemu-block-sshUpgrade xen-kmp-paeUpgrade qemu-block-curlUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade kvmUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-s390xUpgrade qemu-sgabiosUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-x86Upgrade qemuUpgrade xen-tools-domUUpgrade qemu-toolsUpgrade qemu-hw-display-qxlUpgrade xen-develUpgrade qemu-chardev-spiceUpgrade qemu-block-glusterUpgrade qemu-ipxeUpgrade xen-libsUpgrade qemu-ui-cursesUpgrade qemu-block-dmgUpgrade xen-doc-htmlUpgrade qemu-audio-ossUpgrade xen-libs-32bitUpgrade xen-kmp-defaultUpgrade qemu-armUpgrade qemu-ui-openglUpgrade qemu-audio-spice | Nov 27, 2018 | Nov 26, 2018 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-arm | Nov 30, 2018 | Nov 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub