In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's->dsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well.
CVSS Details
- CVSS 3.1 Base Score: 3.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Sep 23, 2019 | Sep 23, 2019 |
| Oracle_linux | — | Upgrade qemuUpgrade qemu-block-rbdUpgrade qemu-system-x86-coreUpgrade qemu-block-glusterUpgrade qemu-kvmUpgrade qemu-commonUpgrade qemu-block-iscsiUpgrade qemu-imgUpgrade qemu-kvm-coreUpgrade qemu-system-x86 | Mar 18, 2020 | Aug 14, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 24, 2019 |
| Suse | — | Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-sgabiosUpgrade xen-toolsUpgrade qemu-chardev-baumUpgrade qemu-toolsUpgrade qemu-block-iscsiUpgrade qemu-s390Upgrade qemu-chardev-spiceUpgrade qemu-ui-gtkUpgrade qemu-ui-sdlUpgrade qemu-guest-agentUpgrade qemu-extraUpgrade xenUpgrade xen-libsUpgrade qemu-kvmUpgrade qemu-langUpgrade qemu-block-rbdUpgrade qemu-audio-spiceUpgrade qemu-vgabiosUpgrade qemu-ipxeUpgrade xen-kmp-defaultUpgrade qemu-audio-sdlUpgrade qemu-s390xUpgrade qemu-block-curlUpgrade qemu-ui-spice-appUpgrade qemu-ksmUpgrade qemu-audio-alsaUpgrade qemu-block-sshUpgrade xen-libs-32bitUpgrade kvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-cursesUpgrade qemu-armUpgrade qemu-hw-usb-redirectUpgrade qemu-block-dmgUpgrade qemu-x86Upgrade qemu-ui-spice-coreUpgrade qemu-ppcUpgrade qemu-linux-userUpgrade qemu-hw-display-qxlUpgrade xen-develUpgrade qemu-hw-display-virtio-gpuUpgrade xen-kmp-paeUpgrade xen-tools-domuUpgrade qemu-skibootUpgrade qemu-microvmUpgrade qemu-seabiosUpgrade qemu-block-nfsUpgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade xen-doc-htmlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-openglUpgrade qemuUpgrade qemu-block-gluster | Oct 24, 2019 | Sep 24, 2019 |
| Ubuntu | — | Upgrade qemu-commonUpgrade qemuUpgrade qemu-kvmUpgrade qemu-user-staticUpgrade qemu-utilsUpgrade qemu-system-commonUpgrade qemu-system-x86Upgrade qemu-system-gui | Nov 14, 2019 | Sep 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub