In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | May 10, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade qemu-system-x86-coreUpgrade qemu-block-iscsiUpgrade qemu-kvmUpgrade ivshmem-toolsUpgrade qemu-system-aarch64-coreUpgrade qemu-imgUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-system-x86Upgrade qemu-block-glusterUpgrade qemu-kvm-coreUpgrade qemu-commonUpgrade qemu-system-aarch64 | Dec 23, 2018 | Oct 25, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 21, 2019 |
| Suse | — | Upgrade qemu-block-rbdUpgrade qemu-kvmUpgrade qemu-ksmUpgrade qemu-chardev-baumUpgrade qemu-hw-usb-redirectUpgrade qemu-extraUpgrade qemu-block-curlUpgrade qemu-audio-paUpgrade qemu-block-iscsiUpgrade qemu-s390Upgrade qemu-skibootUpgrade qemu-ui-spice-coreUpgrade qemu-seabiosUpgrade xen-kmp-paeUpgrade qemu-microvmUpgrade qemu-ui-gtkUpgrade qemu-linux-userUpgrade qemu-langUpgrade qemu-ppcUpgrade qemu-testsuiteUpgrade xen-toolsUpgrade qemu-vgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-guest-agentUpgrade qemu-block-sshUpgrade xenUpgrade qemu-audio-alsaUpgrade xen-tools-domuUpgrade qemu-ui-cursesUpgrade qemu-audio-spiceUpgrade xen-develUpgrade qemu-toolsUpgrade qemu-hw-display-qxlUpgrade qemu-block-dmgUpgrade xen-libs-32bitUpgrade xen-libsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-glusterUpgrade qemu-chardev-spiceUpgrade qemu-armUpgrade xen-doc-htmlUpgrade qemu-x86Upgrade xen-kmp-defaultUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-spice-appUpgrade qemu-s390xUpgrade qemu-ipxeUpgrade qemu-ui-openglUpgrade qemu-audio-ossUpgrade kvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu | Nov 27, 2018 | Nov 26, 2018 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-arm | Nov 30, 2018 | Nov 26, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub