PT-2019-6088 · Qemu+1 · Qemu+1

Published 2019-01-22 · Updated 2019-08-06 · CVE-2019-6501

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions QEMU version 3.1

Description The issue is related to out-of-bounds write and read operations in the scsi handle inquiry reply function in hw/scsi/scsi-generic.c. This can potentially allow an attacker to cause a denial of service.

Recommendations For QEMU version 3.1, consider restricting access to the scsi handle inquiry reply function in hw/scsi/scsi-generic.c to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

BDU:2021-05175

CVE-2019-6501

RHSA-2019:2166

RHSA-2019:2425

RHSA-2019:2553

RHSA-2019_2166

Affected Products

Qemu

Red Hat

References · 17

• 🔥 https://lists.gnu.org/archive/html/qemu-devel/2019-01/msg02324.html · Exploit
• https://linux.oracle.com/errata/ELSA-2019-4640.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2019/01/24/1 · Patch
• https://osv.dev/vulnerability/CVE-2019-6501 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:2166 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:2425 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05175 · Security Note
• https://access.redhat.com/errata/RHSA-2019:2553 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/KJMTVGDLA654HNCDGLCUEIP36SNJEKK7 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-6501 · Security Note
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20211008SE16 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-6501 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJMTVGDLA654HNCDGLCUEIP36SNJEKK7 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2019-6501 · Vendor Advisory
• https://security.netapp.com/advisory/ntap-20190411-0006 · Note