Published: 16/06/2017 Updated: 10/11/2020

CVSS v2 Base Score: 1.9 | Impact Score: 2.9 | Exploitability Score: 3.4

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 169

Vector: AV:L/AC:M/Au:N/C:N/I:N/A:P

QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing.

Vulnerable Product	Search on Vulmon	Subscribe to Product
qemu qemu
debian debian linux 8.0
debian debian linux 9.0

Debian Bug report logs - #864219 qemu: CVE-2017-9375: usb: xhci infinite recursive call via xhci_kick_ep Package: src:qemu; Maintainer for src:qemu is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 5 Jun 2017 11:48:01 UTC Severity: serious ...

Debian Bug report logs - #865754 qemu: CVE-2017-9503: megasas: null pointer dereference while processing megasas command Package: src:qemu; Maintainer for src:qemu is Debian QEMU Team <pkg-qemu-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sat, 24 Jun 2017 14:09:02 UTC Se ...

Several security issues were fixed in QEMU ...

USN-3414-1 introduced a regression in QEMU ...

QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing ...

CWE-476 https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg01313.html https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg01309.html https://bugzilla.redhat.com/show_bug.cgi?id=1459477 http://www.openwall.com/lists/oss-security/2017/06/08/1 http://www.securityfocus.com/bid/99010 https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html https://lists.debian.org/debian-lts-announce/2020/07/msg00020.html https://nvd.nist.gov https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864219 https://usn.ubuntu.com/3414-1/

CVE-2017-9503

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect