In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | qemu | < 1:3.1+dfsg-3 | qemu_1:3.1+dfsg-3_all.deb |
Debian | 11 | all | qemu | < 1:3.1+dfsg-3 | qemu_1:3.1+dfsg-3_all.deb |
Debian | 10 | all | qemu | < 1:3.1+dfsg-3 | qemu_1:3.1+dfsg-3_all.deb |
Debian | 999 | all | qemu | < 1:3.1+dfsg-3 | qemu_1:3.1+dfsg-3_all.deb |
Debian | 13 | all | qemu | < 1:3.1+dfsg-3 | qemu_1:3.1+dfsg-3_all.deb |