VulnerabilityModified
CVE-2017-9503
QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas…
MEDIUM 5.5EPSS 0.41%
Does this matter?
Lower severity and a low EPSS score (0.41%). Track it; it rarely justifies an emergency change on its own.
Description
QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.41% probability · 35th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-476
- Affected
- qemu/qemu · debian/debian linux
- Source
- cve@mitre.org
References
- http://www.openwall.com/lists/oss-security/2017/06/08/1Mailing List, Patch, Third Party Advisory
- http://www.securityfocus.com/bid/99010Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1459477Issue Tracking, Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/09/msg00007.htmlThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/07/msg00020.htmlThird Party Advisory
- https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg01309.htmlIssue Tracking, Patch, Third Party Advisory
- https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg01313.htmlIssue Tracking, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2017/06/08/1Mailing List, Patch, Third Party Advisory
- http://www.securityfocus.com/bid/99010Third Party Advisory, VDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=1459477Issue Tracking, Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/09/msg00007.htmlThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2020/07/msg00020.htmlThird Party Advisory
- https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg01309.htmlIssue Tracking, Patch, Third Party Advisory
- https://lists.gnu.org/archive/html/qemu-devel/2017-06/msg01313.htmlIssue Tracking, Patch, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.