← All advisories

Critical severity9.8NVD Advisory· Published Aug 28, 2017· Updated Jun 17, 2026

CVE-2017-8380

CVE-2017-8380

Description

Buffer overflow in the "megasas_mmio_write" function in Qemu 2.9.0 allows remote attackers to have unspecified impact via unknown vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9

QEMU/Qemu
cpe:2.3:a:qemu:qemu:2.9.0:*:*:*:*:*:*:*
osv-coords8 versions
pkg:rpm/opensuse/qemu&distro=openSUSE%20Tumbleweed pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2 pkg:rpm/suse/qemu&distro=SUSE%20OpenStack%20Cloud%206
< 6.1.0-32.1+ 7 more
- (no CPE)range: < 6.1.0-32.1
- (no CPE)range: < 2.6.2-41.16.1
- (no CPE)range: < 2.3.1-33.3.3
- (no CPE)range: < 2.6.2-41.16.1
- (no CPE)range: < 2.6.2-41.16.1
- (no CPE)range: < 2.3.1-33.3.3
- (no CPE)range: < 2.6.2-41.16.1
- (no CPE)range: < 2.3.1-33.3.3

Patches

Vulnerability mechanics

References

3

lists.gnu.org/archive/html/qemu-devel/2017-04/msg04147.htmlnvdPatchThird Party Advisory
www.securityfocus.com/bid/98303nvdThird Party AdvisoryVDB Entry
security.gentoo.org/glsa/201706-03nvdIssue TrackingThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.