In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.
CVSS Details
- CVSS 3.1 Base Score: 3.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | May 28, 2020 |
| Debian | — | Upgrade qemu | Jul 2, 2020 | May 28, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Nov 12, 2020 | May 28, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Nov 3, 2020 | May 28, 2020 |
| Oracle_linux | — | Upgrade qemu-kvm-coreUpgrade qemu-block-glusterUpgrade qemu-imgUpgrade qemu-commonUpgrade qemu-system-aarch64Upgrade qemuUpgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86Upgrade qemu-block-rbdUpgrade qemu-kvmUpgrade qemu-system-x86-coreUpgrade ivshmem-tools | Feb 9, 2021 | May 7, 2020 |
| Suse | — | Upgrade qemu-block-iscsiUpgrade qemu-langUpgrade qemu-s390Upgrade qemu-block-sshUpgrade qemu-chardev-spiceUpgrade qemu-block-rbdUpgrade qemu-ui-gtkUpgrade qemu-s390xUpgrade qemu-skibootUpgrade qemu-block-curlUpgrade qemu-ipxeUpgrade qemu-seabiosUpgrade qemu-guest-agentUpgrade qemu-toolsUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-appUpgrade qemu-block-glusterUpgrade qemu-chardev-baumUpgrade qemu-armUpgrade qemu-ui-openglUpgrade qemu-testsuiteUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-alsaUpgrade qemu-audio-spiceUpgrade qemu-ksmUpgrade qemu-ui-spice-coreUpgrade qemu-ppcUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-nfsUpgrade qemu-audio-sdlUpgrade qemu-x86Upgrade qemu-vhost-user-gpuUpgrade qemu-kvmUpgrade qemu-extraUpgrade qemu-microvmUpgrade kvmUpgrade qemu-vgabiosUpgrade qemu-audio-ossUpgrade qemu-sgabiosUpgrade qemu-linux-userUpgrade qemu-ui-sdlUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade qemu-ui-cursesUpgrade qemu-block-dmg | Jul 29, 2020 | May 28, 2020 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemuUpgrade qemu (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system-x86-microvmUpgrade qemu-system-x86-xenUpgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-aarch64 | Aug 20, 2020 | May 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub