tocsin

Debian/qemu: unknown

The virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds arra

Action: Upgrade qemu to 2.1+dfsg-1 or later.

Affected

introducedfixedlast affected
02.1+dfsg-1-

Fixed versions

2.1+dfsg-1

Sources

published · modified · JSON