In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's->dsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well.
CVSS Details
- CVSS 3.1 Base Score: 3.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Sep 23, 2019 | Sep 23, 2019 |
| Oracle_linux | — | Upgrade qemuUpgrade qemu-kvmUpgrade qemu-block-rbdUpgrade qemu-block-glusterUpgrade qemu-commonUpgrade qemu-system-x86-coreUpgrade qemu-imgUpgrade qemu-block-iscsiUpgrade qemu-kvm-coreUpgrade qemu-system-x86 | Mar 18, 2020 | Aug 14, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 24, 2019 |
| Suse | — | Upgrade xen-toolsUpgrade qemu-ksmUpgrade qemu-sgabiosUpgrade qemu-chardev-spiceUpgrade qemu-langUpgrade qemu-kvmUpgrade qemu-toolsUpgrade qemu-vgabiosUpgrade qemu-extraUpgrade qemu-ui-gtkUpgrade qemu-s390xUpgrade qemu-audio-spiceUpgrade qemu-s390Upgrade qemu-block-sshUpgrade qemu-guest-agentUpgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade xen-libsUpgrade xen-kmp-defaultUpgrade qemu-block-rbdUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-ossUpgrade qemu-ppcUpgrade xen-doc-htmlUpgrade qemu-ui-cursesUpgrade qemu-microvmUpgrade qemu-skibootUpgrade qemu-audio-paUpgrade qemu-block-glusterUpgrade qemu-block-nfsUpgrade qemu-linux-userUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-spice-coreUpgrade xen-develUpgrade qemuUpgrade xen-tools-domuUpgrade qemu-hw-display-virtio-gpuUpgrade xen-kmp-paeUpgrade qemu-block-dmgUpgrade qemu-armUpgrade qemu-x86Upgrade qemu-hw-display-qxlUpgrade qemu-ui-openglUpgrade qemu-ipxeUpgrade xenUpgrade qemu-audio-sdlUpgrade kvmUpgrade qemu-ui-sdlUpgrade qemu-audio-alsaUpgrade qemu-block-curlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-spice-appUpgrade xen-libs-32bit | Oct 24, 2019 | Sep 24, 2019 |
| Ubuntu | — | Upgrade qemu-system-commonUpgrade qemu-system-guiUpgrade qemu-system-x86Upgrade qemu-kvmUpgrade qemuUpgrade qemu-user-staticUpgrade qemu-utilsUpgrade qemu-common | Nov 14, 2019 | Sep 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub