In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's->dsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well.
CVSS Details
- CVSS 3.1 Base Score: 3.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Sep 23, 2019 | Sep 23, 2019 |
| Oracle_linux | — | Upgrade qemu-commonUpgrade qemu-block-rbdUpgrade qemu-kvmUpgrade qemuUpgrade qemu-system-x86-coreUpgrade qemu-block-glusterUpgrade qemu-system-x86Upgrade qemu-block-iscsiUpgrade qemu-imgUpgrade qemu-kvm-core | Mar 18, 2020 | Aug 14, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 24, 2019 |
| Suse | — | Upgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-cursesUpgrade qemu-armUpgrade qemu-hw-usb-redirectUpgrade qemu-x86Upgrade qemu-block-nfsUpgrade qemu-audio-ossUpgrade qemu-ppcUpgrade qemu-ui-spice-coreUpgrade qemu-block-dmgUpgrade qemu-seabiosUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-linux-userUpgrade qemuUpgrade qemu-microvmUpgrade xen-kmp-paeUpgrade qemu-block-glusterUpgrade xen-tools-domuUpgrade xen-develUpgrade qemu-audio-paUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-doc-htmlUpgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade xen-libs-32bitUpgrade qemu-ui-spice-appUpgrade qemu-block-curlUpgrade qemu-audio-sdlUpgrade qemu-audio-alsaUpgrade qemu-ui-sdlUpgrade qemu-ksmUpgrade qemu-s390xUpgrade qemu-block-sshUpgrade qemu-audio-spiceUpgrade qemu-s390Upgrade qemu-chardev-spiceUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xenUpgrade qemu-sgabiosUpgrade qemu-toolsUpgrade qemu-kvmUpgrade xen-toolsUpgrade qemu-guest-agentUpgrade qemu-extraUpgrade xen-libsUpgrade qemu-vgabiosUpgrade qemu-block-rbdUpgrade qemu-ipxeUpgrade qemu-ui-gtkUpgrade kvmUpgrade qemu-langUpgrade xen-kmp-default | Oct 24, 2019 | Sep 24, 2019 |
| Ubuntu | — | Upgrade qemu-system-guiUpgrade qemu-system-commonUpgrade qemu-system-x86Upgrade qemu-user-staticUpgrade qemu-commonUpgrade qemu-utilsUpgrade qemu-kvmUpgrade qemu | Nov 14, 2019 | Sep 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub