A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | May 28, 2021 |
| Debian | — | Upgrade qemu | Sep 6, 2022 | May 28, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | May 28, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 28, 2022 | May 28, 2021 |
| Suse | — | Upgrade qemu-x86Upgrade qemu-hw-display-qxlUpgrade qemu-block-nfsUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-cursesUpgrade qemuUpgrade qemu-hw-usb-redirectUpgrade qemu-block-glusterUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-openglUpgrade qemu-block-dmgUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-toolsUpgrade qemu-armUpgrade qemu-guest-agentUpgrade qemu-skibootUpgrade qemu-audio-paUpgrade qemu-linux-userUpgrade qemu-ivshmem-toolsUpgrade qemu-ppcUpgrade qemu-seabiosUpgrade qemu-kvmUpgrade qemu-vhost-user-gpuUpgrade qemu-ui-spice-coreUpgrade qemu-audio-sdlUpgrade qemu-chardev-spiceUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-usb-smartcardUpgrade qemu-microvmUpgrade qemu-sgabiosUpgrade qemu-extraUpgrade qemu-audio-alsaUpgrade qemu-s390xUpgrade qemu-block-iscsiUpgrade qemu-langUpgrade qemu-audio-spiceUpgrade qemu-ui-sdlUpgrade qemu-s390Upgrade qemu-ui-gtkUpgrade qemu-vgabiosUpgrade qemu-block-sshUpgrade qemu-testsuiteUpgrade qemu-chardev-baumUpgrade qemu-ipxeUpgrade qemu-block-rbdUpgrade qemu-ksmUpgrade qemu-block-curl | Aug 21, 2021 | May 28, 2021 |
| Ubuntu | — | Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-system-x86-xenUpgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system-x86-microvmUpgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-block-extra (Ubuntu Pro) | Jul 16, 2021 | May 28, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub