In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | May 10, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade qemu-commonUpgrade qemu-block-glusterUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-system-aarch64Upgrade qemu-kvm-coreUpgrade qemu-system-x86Upgrade qemu-system-aarch64-coreUpgrade ivshmem-toolsUpgrade qemu-block-iscsiUpgrade qemu-system-x86-coreUpgrade qemu-kvm | Dec 23, 2018 | Oct 25, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 21, 2019 |
| Suse | — | Upgrade qemu-testsuiteUpgrade qemu-chardev-baumUpgrade qemu-s390Upgrade qemu-audio-alsaUpgrade qemu-ui-spice-coreUpgrade qemu-ui-gtkUpgrade qemu-skibootUpgrade qemu-langUpgrade qemu-microvmUpgrade qemu-ksmUpgrade qemu-hw-usb-redirectUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade xen-toolsUpgrade xenUpgrade qemu-block-sshUpgrade qemu-linux-userUpgrade qemu-extraUpgrade xen-tools-domuUpgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-audio-paUpgrade qemu-kvmUpgrade qemu-ppcUpgrade xen-kmp-paeUpgrade qemu-seabiosUpgrade qemu-vgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-dmgUpgrade qemu-audio-ossUpgrade qemu-ipxeUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-spice-appUpgrade qemu-block-glusterUpgrade qemu-ui-cursesUpgrade xen-libsUpgrade qemu-sgabiosUpgrade qemu-audio-spiceUpgrade qemuUpgrade qemu-hw-display-qxlUpgrade qemu-toolsUpgrade qemu-x86Upgrade xen-develUpgrade qemu-ui-openglUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-armUpgrade xen-doc-htmlUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-kmp-defaultUpgrade xen-libs-32bitUpgrade kvm | Nov 27, 2018 | Nov 26, 2018 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-misc | Nov 30, 2018 | Nov 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub