Description
In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | qemu | 1:3.1+dfsg-3 | — |
| Debian 13 | qemu | 1:3.1+dfsg-3 | — |
| Debian 12 | qemu | 1:3.1+dfsg-3 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | qemu-img-ma +7 | 10:2.12.0-33.el7 | RHSA-2019:2553, RHSA-2019:2166 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhev Manager 4 | qemu-img-rhev +3 | 10:2.12.0-33.el7 | RHSA-2019:2553 |
| Red Hat OpenStack 14 | qemu-img-rhev +3 | 10:2.12.0-33.el7 | RHSA-2019:2425 |
| Red Hat OpenStack 13 | qemu-img-rhev +3 | 10:2.12.0-33.el7 | RHSA-2019:2425 |
| Red Hat OpenStack 10 | qemu-img-rhev +3 | 10:2.12.0-33.el7 | RHSA-2019:2425 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | qemu +10 | 15:3.1.0-3.el7 | ELSA-2019-4640 |
Advisories 5
- RHSA-2019:2166 Red Hat Security Advisory: qemu-kvm-ma security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2019:2553 Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- RHSA-2019:2425 Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update Red Hat Security Advisories (RHSA) · Jun 28, 2026
- WID-SEC-2024-1993 QEMU: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes BSI CERT-Bund (WID) · Sep 2, 2024
- ELSA-2019-4640 Important: qemu security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · May 14, 2019
References
- MLIST [oss-security] 20190124 CVE-2019-6501 QEMU: scsi-generic: possible OOB access while handling inquiry request mailing-list
- [Qemu-devel][PATCH] 20190111 scsi-generic: avoid possible out-of-bounds access to r->buf mailing-list
- FEDORA-2019-0664c7724d vendor-advisory
- https://security.netapp.com/advisory/ntap-20190411-0006/
- RHSA-2019:2166 vendor-advisory
- RHSA-2019:2425 vendor-advisory
- RHSA-2019:2553 vendor-advisory