CVE-2017-9503
- State
- Published
- Severity
- Not scored
- Published
- Jun 16, 2017
- Updated
- Aug 5, 2024
- Reserved
- Jun 7, 2017
Description
QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security updatemailing-list
- [oss-security] 20170608 CVE-2017-9503 Qemu: scsi: null pointer dereference while processing megasas commandmailing-list
- 99010vdb-entry
- [qemu-devel] 20170606 [PATCH 7/7] megasas: always store SCSIRequest* into Megasasmailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=1459477
- [qemu-devel] 20170606 [PATCH 4/7] megasas: do not read DCMD opcode more than oncemailing-list
- [debian-lts-announce] 20200726 [SECURITY] [DLA 2288-1] qemu security updatemailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.