Debian/qemu: medium 6.7
The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a
Action: Upgrade qemu to 1:2.6+dfsg-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:2.6+dfsg-2 | - |
Fixed versions
| 1:2.6+dfsg-2 |
Sources
published · modified · JSON