CVE-2019-6501

Name of the Vulnerable Software and Affected Versions QEMU version 3.1

Description The issue is related to out-of-bounds write and read operations in the scsi handle inquiry reply function in hw/scsi/scsi-generic.c. This can potentially allow an attacker to cause a denial of service.

Recommendations For QEMU version 3.1, consider restricting access to the scsi handle inquiry reply function in hw/scsi/scsi-generic.c to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.