In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's->dsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well.
CVSS Details
- CVSS 3.1 Base Score: 3.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Sep 23, 2019 | Sep 23, 2019 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade qemu-block-iscsiUpgrade qemu-kvm-coreUpgrade qemu-system-x86Upgrade qemu-commonUpgrade qemu-system-x86-coreUpgrade qemu-block-rbdUpgrade qemu-block-glusterUpgrade qemuUpgrade qemu-kvm | Mar 18, 2020 | Aug 14, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 24, 2019 |
| Suse | — | Upgrade qemu-s390xUpgrade qemu-langUpgrade qemu-sgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-gtkUpgrade xen-kmp-defaultUpgrade kvmUpgrade qemu-ui-sdlUpgrade qemu-audio-alsaUpgrade qemu-extraUpgrade qemu-ksmUpgrade xen-toolsUpgrade xen-libsUpgrade qemu-toolsUpgrade qemu-kvmUpgrade xenUpgrade qemu-block-sshUpgrade qemu-chardev-baumUpgrade qemu-block-iscsiUpgrade qemu-chardev-spiceUpgrade qemu-s390Upgrade xen-libs-32bitUpgrade qemu-ui-spice-appUpgrade qemu-block-rbdUpgrade qemu-audio-spiceUpgrade qemu-ipxeUpgrade qemu-vgabiosUpgrade qemu-guest-agentUpgrade qemu-audio-sdlUpgrade qemu-block-curlUpgrade qemu-block-glusterUpgrade xen-tools-domUUpgrade qemu-ui-cursesUpgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade qemu-block-dmgUpgrade qemu-linux-userUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-x86Upgrade qemu-ppcUpgrade qemu-seabiosUpgrade qemu-skibootUpgrade qemu-block-nfsUpgrade qemu-microvmUpgrade qemu-hw-display-qxlUpgrade xen-doc-htmlUpgrade xen-kmp-paeUpgrade xen-develUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-spice-coreUpgrade qemuUpgrade qemu-armUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-vga | Oct 24, 2019 | Sep 24, 2019 |
| Ubuntu | — | Upgrade qemu-user-staticUpgrade qemu-commonUpgrade qemu-utilsUpgrade qemu-kvmUpgrade qemuUpgrade qemu-system-x86Upgrade qemu-system-guiUpgrade qemu-system-common | Nov 14, 2019 | Sep 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub