A use-after-free flaw was found in the MegaRAID emulator of QEMU. This issue occurs while processing SCSI I/O requests in the case of an error mptsas_free_request() that does not dequeue the request object 'req' from a pending requests queue. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. Versions between 2.10.0 and 5.2.0 are potentially affected.
CVSS Details
- CVSS 3.1 Base Score: 3.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Mar 23, 2021 |
| Amazon Linux Ami 2 | — | Upgrade qemu-user-binfmtUpgrade qemu-commonUpgrade qemu-kvm-coreUpgrade qemu-ui-sdlUpgrade qemu-block-rbdUpgrade qemu-audio-ossUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemuUpgrade qemu-block-nfsUpgrade qemu-audio-sdlUpgrade qemu-system-aarch64Upgrade qemu-block-sshUpgrade qemu-user-staticUpgrade qemu-system-x86Upgrade qemu-ui-cursesUpgrade qemu-audio-alsaUpgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-audio-paUpgrade ivshmem-toolsUpgrade qemu-system-aarch64-coreUpgrade qemu-block-dmgUpgrade qemu-ui-gtkUpgrade qemu-system-x86-coreUpgrade qemu-kvmUpgrade qemu-debuginfoUpgrade qemu-user | Jun 6, 2023 | Mar 23, 2021 |
| Debian | — | Upgrade qemu | Apr 12, 2021 | Mar 23, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 28, 2022 | Mar 23, 2021 |
| Oracle_linux | — | Upgrade qemu-kvm-block-iscsiUpgrade qemuUpgrade python3-libvirtUpgrade qemu-system-x86-coreUpgrade libvirt-bash-completionUpgrade libvirt-develUpgrade libguestfs-gobject-develUpgrade qemu-block-rbdUpgrade nbdkit-bash-completionUpgrade libvirt-clientUpgrade libvirtUpgrade nbdkit-example-pluginsUpgrade libvirt-adminUpgrade libguestfs-inspect-iconsUpgrade nbdkit-gzip-pluginUpgrade libguestfs-man-pages-ukUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-basic-filtersUpgrade nbdkit-linuxdisk-pluginUpgrade libguestfs-gobjectUpgrade netcfUpgrade python3-libnbdUpgrade libguestfs-winsupportUpgrade libnbdUpgrade hivex-develUpgrade libguestfs-man-pages-jaUpgrade libguestfs-tools-cUpgrade qemu-guest-agentUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-rbdUpgrade nbdkit-curl-pluginUpgrade ruby-libguestfsUpgrade libguestfs-bash-completionUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-nodedevUpgrade netcf-libsUpgrade qemu-kvmUpgrade qemu-kvm-block-glusterUpgrade nbdkit-develUpgrade libguestfs-benchmarkingUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-networkUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-xz-filterUpgrade qemu-kvm-block-sshUpgrade libguestfsUpgrade libvirt-lock-sanlockUpgrade python3-libguestfsUpgrade qemu-commonUpgrade qemu-system-x86Upgrade libvirt-daemon-driver-storageUpgrade virt-dibUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-rsyncUpgrade libguestfs-develUpgrade nbdfuseUpgrade nbdkit-basic-pluginsUpgrade qemu-imgUpgrade nbdkit-serverUpgrade libvirt-daemon-kvmUpgrade libguestfs-toolsUpgrade libguestfs-javaUpgrade libiscsi-develUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-java-develUpgrade qemu-block-glusterUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nwfilterUpgrade sgabios-binUpgrade seabiosUpgrade nbdkitUpgrade libvirt-libsUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libguestfs-xfsUpgrade ivshmem-toolsUpgrade hivexUpgrade supermin-develUpgrade seavgabios-binUpgrade netcf-develUpgrade nbdkit-vddk-pluginUpgrade qemu-system-aarch64-coreUpgrade sgabiosUpgrade lua-guestfsUpgrade libvirt-daemon-driver-storage-diskUpgrade superminUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-config-networkUpgrade libguestfs-gfs2Upgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-javadocUpgrade libvirt-daemonUpgrade qemu-system-aarch64Upgrade libvirt-daemon-driver-qemuUpgrade libnbd-develUpgrade qemu-block-iscsiUpgrade nbdkit-python-pluginUpgrade libvirt-docsUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-rescueUpgrade perl-hivexUpgrade qemu-kvm-commonUpgrade nbdkit-ssh-pluginUpgrade seabios-binUpgrade python3-hivexUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-rbd | Aug 17, 2021 | Feb 2, 2021 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-x86-microvmUpgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-x86-xenUpgrade qemu-system-mipsUpgrade qemu-system-s390x | Jul 16, 2021 | Mar 23, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub