In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | May 10, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade qemu-system-aarch64-coreUpgrade qemu-block-iscsiUpgrade qemu-system-x86-coreUpgrade ivshmem-toolsUpgrade qemu-kvmUpgrade qemu-block-glusterUpgrade qemu-system-x86Upgrade qemu-commonUpgrade qemu-imgUpgrade qemu-system-aarch64Upgrade qemu-kvm-coreUpgrade qemu-block-rbdUpgrade qemu | Dec 23, 2018 | Oct 25, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 21, 2019 |
| Suse | — | Upgrade qemu-langUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade qemu-block-sshUpgrade xenUpgrade qemu-hw-usb-redirectUpgrade qemu-extraUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade qemu-block-iscsiUpgrade qemu-skibootUpgrade qemu-ui-spice-coreUpgrade qemu-linux-userUpgrade xen-toolsUpgrade xen-kmp-paeUpgrade qemu-chardev-baumUpgrade qemu-audio-paUpgrade qemu-ksmUpgrade qemu-vgabiosUpgrade qemu-block-rbdUpgrade qemu-testsuiteUpgrade qemu-microvmUpgrade qemu-ppcUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390Upgrade qemu-block-curlUpgrade qemu-seabiosUpgrade qemu-ui-openglUpgrade xen-doc-htmlUpgrade qemu-block-dmgUpgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-gpu-pciUpgrade kvmUpgrade qemu-block-glusterUpgrade qemu-ipxeUpgrade qemu-hw-display-qxlUpgrade xen-develUpgrade qemu-toolsUpgrade qemuUpgrade xen-tools-domUUpgrade xen-libs-32bitUpgrade qemu-x86Upgrade qemu-sgabiosUpgrade qemu-s390xUpgrade qemu-audio-spiceUpgrade qemu-ui-spice-appUpgrade qemu-armUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-cursesUpgrade xen-libsUpgrade qemu-audio-oss | Nov 27, 2018 | Nov 26, 2018 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-arm | Nov 30, 2018 | Nov 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub