CVE-2019-6501: Medium severity qemu vulnerability
An out of bounds r/w access issue was found in the way QEMU handled inquiry request coming from a guest in scsihandleinquiryreply(). A guest user/process could use this flaw to corrupt byte of QEMU process memory.
Upstream patch: --------------- -> https://lists.gnu.org/archive/html/qemu-devel/2019-01/msg02324.html
Reference: ---------- -> https://www.openwall.com/lists/oss-security/2019/01/24/1
Other sources
In QEMU 3.1, scsihandleinquiryreply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.
Affected Software
Remediation
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2019-6501?
CVE-2019-6501 is classified as a high severity vulnerability due to the potential for memory corruption in the QEMU process.
How do I fix CVE-2019-6501?
To fix CVE-2019-6501, upgrade to the patched version 10:2.12.0-33.el7 for the affected QEMU packages.
What systems are affected by CVE-2019-6501?
CVE-2019-6501 affects several versions of QEMU, including QEMU KVM and specific Fedora releases.
What type of vulnerability is CVE-2019-6501?
CVE-2019-6501 is a memory corruption vulnerability caused by out-of-bounds read and write access.
Can exploiting CVE-2019-6501 allow remote code execution?
Yes, exploiting CVE-2019-6501 may allow an attacker to execute arbitrary code on the QEMU host.