In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user.
CVSS Details
- CVSS 3.1 Base Score: 3.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | May 28, 2020 |
| Debian | — | Upgrade qemu | Jul 2, 2020 | May 28, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Nov 12, 2020 | May 28, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade qemu-img | Nov 3, 2020 | May 28, 2020 |
| Oracle_linux | — | Upgrade qemu-kvmUpgrade qemu-system-x86-coreUpgrade ivshmem-toolsUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86Upgrade qemu-block-iscsiUpgrade qemu-block-rbdUpgrade qemu-imgUpgrade qemu-system-aarch64Upgrade qemuUpgrade qemu-commonUpgrade qemu-block-glusterUpgrade qemu-kvm-core | Feb 9, 2021 | May 7, 2020 |
| Suse | — | Upgrade qemu-s390xUpgrade qemu-block-rbdUpgrade qemu-s390Upgrade qemu-chardev-spiceUpgrade qemu-ui-spice-appUpgrade qemu-block-glusterUpgrade qemu-block-curlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-guest-agentUpgrade qemu-audio-alsaUpgrade qemu-seabiosUpgrade qemu-block-iscsiUpgrade qemu-toolsUpgrade qemu-testsuiteUpgrade qemu-ipxeUpgrade qemu-ksmUpgrade qemu-ppcUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-coreUpgrade qemu-armUpgrade qemu-audio-spiceUpgrade qemu-block-sshUpgrade qemu-audio-paUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-gtkUpgrade qemu-skibootUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-cursesUpgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade qemu-linux-userUpgrade qemu-kvmUpgrade qemu-vhost-user-gpuUpgrade qemu-ui-sdlUpgrade qemu-block-dmgUpgrade qemu-microvmUpgrade qemu-extraUpgrade qemu-audio-ossUpgrade qemu-hw-display-qxlUpgrade kvmUpgrade qemu-x86Upgrade qemu-audio-sdlUpgrade qemuUpgrade qemu-block-nfs | Jul 29, 2020 | May 28, 2020 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-aarch64Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system-x86-microvmUpgrade qemu-system-x86-xenUpgrade qemuUpgrade qemu (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro) | Aug 20, 2020 | May 28, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub