In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | May 10, 2019 | Mar 21, 2019 |
| Oracle_linux | — | Upgrade ivshmem-toolsUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-kvmUpgrade qemu-system-x86-coreUpgrade qemu-block-glusterUpgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-system-x86Upgrade qemu-commonUpgrade qemu-kvm-core | Dec 23, 2018 | Oct 25, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 21, 2019 |
| Suse | — | Upgrade qemu-testsuiteUpgrade xenUpgrade qemu-block-sshUpgrade xen-kmp-paeUpgrade qemu-ui-spice-coreUpgrade qemu-block-curlUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-gtkUpgrade qemu-guest-agentUpgrade qemu-langUpgrade qemu-extraUpgrade qemu-audio-alsaUpgrade qemu-kvmUpgrade qemu-audio-paUpgrade qemu-chardev-baumUpgrade qemu-s390Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ksmUpgrade qemu-skibootUpgrade qemu-microvmUpgrade qemu-vgabiosUpgrade qemu-block-rbdUpgrade qemu-linux-userUpgrade qemu-ppcUpgrade qemu-seabiosUpgrade xen-toolsUpgrade qemu-block-iscsiUpgrade qemu-x86Upgrade qemu-ui-cursesUpgrade xen-tools-domUUpgrade kvmUpgrade qemu-hw-display-virtio-gpuUpgrade xen-libsUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-toolsUpgrade xen-develUpgrade qemu-hw-display-qxlUpgrade qemu-ipxeUpgrade qemuUpgrade qemu-ui-openglUpgrade qemu-block-dmgUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-kmp-defaultUpgrade xen-libs-32bitUpgrade xen-doc-htmlUpgrade qemu-audio-ossUpgrade qemu-sgabiosUpgrade qemu-audio-spiceUpgrade qemu-s390xUpgrade qemu-ui-spice-appUpgrade qemu-block-glusterUpgrade qemu-armUpgrade qemu-chardev-spice | Nov 27, 2018 | Nov 26, 2018 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-arm | Nov 30, 2018 | Nov 26, 2018 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub