CVE-2024-6519 - Vulnerability Details

Vendors	Products
Redhat	Advanced Virtualization Enterprise Linux

Link	Providers
https://access.redhat.com/security/cve/CVE-2024-6519
https://bugzilla.redhat.com/show_bug.cgi?id=2292089
https://nvd.nist.gov/vuln/detail/CVE-2024-6519
https://www.cve.org/CVERecord?id=CVE-2024-6519
https://www.zerodayinitiative.com/advisories/ZDI-24-1382/

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Title	QEMU: SCSI: lsi53c895a: use-after-free local privilege escalation vulnerability	Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability
First Time appeared		Redhat Redhat advanced Virtualization Redhat enterprise Linux
CPEs		cpe:/a:redhat:advanced_virtualization:8::el8 cpe:/o:redhat:enterprise_linux:6 cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:9
Vendors & Products		Redhat Redhat advanced Virtualization Redhat enterprise Linux
References		https://access.redhat.com/security/cve/CVE-2024-6519 https://bugzilla.redhat.com/show_bug.cgi?id=2292089

Type	Values Removed	Values Added
References		https://www.zerodayinitiative.com/advisories/ZDI-24-1382/

Type	Values Removed	Values Added
Description		A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape.
Title		QEMU: SCSI: lsi53c895a: use-after-free local privilege escalation vulnerability
Weaknesses		CWE-416
References		https://nvd.nist.gov/vuln/detail/CVE-2024-6519 https://www.cve.org/CVERecord?id=CVE-2024-6519
Metrics	threat_severity `None`	cvssV3_1 `{'score': 8.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H'}` threat_severity `Important`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-6519", "assignerOrgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "state": "PUBLISHED", "assignerShortName": "fedora", "dateReserved": "2024-07-04T19:12:32.075Z", "datePublished": "2024-10-21T14:36:40.115Z", "dateUpdated": "2024-10-21T15:49:23.239Z"}, "containers": {"cna": {"title": "Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability", "metrics": [{"other": {"content": {"value": "Important", "namespace": "https://access.redhat.com/security/updates/classification/"}, "type": "Red Hat severity rating"}}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS"}], "descriptions": [{"lang": "en", "value": "A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape."}], "affected": [{"packageName": "qemu", "collectionURL": "https://github.com/qemu/qemu", "defaultStatus": "affected"}, {"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "qemu-kvm", "defaultStatus": "unaffected", "cpes": ["cpe:/o:redhat:enterprise_linux:6"]}, {"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "qemu-kvm", "defaultStatus": "unaffected", "cpes": ["cpe:/o:redhat:enterprise_linux:7"]}, {"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "qemu-kvm-ma", "defaultStatus": "unaffected", "cpes": ["cpe:/o:redhat:enterprise_linux:7"]}, {"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "virt:rhel/qemu-kvm", "defaultStatus": "unaffected", "cpes": ["cpe:/o:redhat:enterprise_linux:8"]}, {"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8 Advanced Virtualization", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "virt:av/qemu-kvm", "defaultStatus": "unaffected", "cpes": ["cpe:/a:redhat:advanced_virtualization:8::el8"]}, {"vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "qemu-kvm", "defaultStatus": "unaffected", "cpes": ["cpe:/o:redhat:enterprise_linux:9"]}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2024-6519", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292089", "name": "RHBZ#2292089", "tags": ["issue-tracking", "x_refsource_REDHAT"]}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1382/"}], "datePublic": "2024-10-10T00:00:00+00:00", "problemTypes": [{"descriptions": [{"cweId": "CWE-416", "description": "Use After Free", "lang": "en", "type": "CWE"}]}], "x_redhatCweChain": "CWE-416: Use After Free", "timeline": [{"lang": "en", "time": "2024-06-12T00:00:00+00:00", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2024-10-10T00:00:00+00:00", "value": "Made public."}], "credits": [{"lang": "en", "value": "Red Hat would like to thank Cyrille Chatras (Trend Micro Zero Day Initiative) for reporting this issue."}], "providerMetadata": {"orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "shortName": "fedora", "dateUpdated": "2024-10-21T14:36:40.115Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-21T15:49:12.959240Z", "id": "CVE-2024-6519", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-21T15:49:23.239Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-6519 (string)

assignerOrgId : 92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5 (string)

state : PUBLISHED (string)

assignerShortName : fedora (string)

dateReserved : 2024-07-04T19:12:32.075Z (string)

datePublished : 2024-10-21T14:36:40.115Z (string)

dateUpdated : 2024-10-21T15:49:23.239Z (string)

}

containers : { »

cna : { »

title : Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability (string)

metrics : [ »

0 : { »

other : { »

content : { »

value : Important (string)

namespace : https://access.redhat.com/security/updates/classification/ (string)

}

type : Red Hat severity rating (string)

}

1 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 8.2 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H (string)

version : 3.1 (string)

}

format : CVSS (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape. (string)

}

]

affected : [ »

0 : { »

packageName : qemu (string)

collectionURL : https://github.com/qemu/qemu (string)

defaultStatus : affected (string)

}

1 : { »

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 6 (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

packageName : qemu-kvm (string)

defaultStatus : unaffected (string)

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:6 (string)

]

}

2 : { »

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 7 (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

packageName : qemu-kvm (string)

defaultStatus : unaffected (string)

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:7 (string)

]

}

3 : { »

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 7 (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

packageName : qemu-kvm-ma (string)

defaultStatus : unaffected (string)

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:7 (string)

]

}

4 : { »

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 8 (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

packageName : virt:rhel/qemu-kvm (string)

defaultStatus : unaffected (string)

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:8 (string)

]

}

5 : { »

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 8 Advanced Virtualization (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

packageName : virt:av/qemu-kvm (string)

defaultStatus : unaffected (string)

cpes : [ »

0 : cpe:/a:redhat:advanced_virtualization:8::el8 (string)

]

}

6 : { »

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 9 (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

packageName : qemu-kvm (string)

defaultStatus : unaffected (string)

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:9 (string)

]

}

]

references : [ »

0 : { »

url : https://access.redhat.com/security/cve/CVE-2024-6519 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_REDHAT (string)

]

}

1 : { »

url : https://bugzilla.redhat.com/show_bug.cgi?id=2292089 (string)

name : RHBZ#2292089 (string)

tags : [ »

0 : issue-tracking (string)

1 : x_refsource_REDHAT (string)

]

}

2 : { »

url : https://www.zerodayinitiative.com/advisories/ZDI-24-1382/ (string)

}

]

datePublic : 2024-10-10T00:00:00+00:00 (string)

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-416 (string)

description : Use After Free (string)

lang : en (string)

type : CWE (string)

}

]

}

]

x_redhatCweChain : CWE-416: Use After Free (string)

timeline : [ »

0 : { »

lang : en (string)

time : 2024-06-12T00:00:00+00:00 (string)

value : Reported to Red Hat. (string)

}

1 : { »

lang : en (string)

time : 2024-10-10T00:00:00+00:00 (string)

value : Made public. (string)

}

]

credits : [ »

0 : { »

lang : en (string)

value : Red Hat would like to thank Cyrille Chatras (Trend Micro Zero Day Initiative) for reporting this issue. (string)

}

]

providerMetadata : { »

orgId : 92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5 (string)

shortName : fedora (string)

dateUpdated : 2024-10-21T14:36:40.115Z (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-10-21T15:49:12.959240Z (string)

id : CVE-2024-6519 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-21T15:49:23.239Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-6519", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-10-21T15:49:12.959240Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-21T15:49:19.478Z"}}], "cna": {"title": "Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability", "credits": [{"lang": "en", "value": "Red Hat would like to thank Cyrille Chatras (Trend Micro Zero Day Initiative) for reporting this issue."}], "metrics": [{"other": {"type": "Red Hat severity rating", "content": {"value": "Important", "namespace": "https://access.redhat.com/security/updates/classification/"}}}, {"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}], "affected": [{"packageName": "qemu", "collectionURL": "https://github.com/qemu/qemu", "defaultStatus": "affected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:6"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 6", "packageName": "qemu-kvm", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:7"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "packageName": "qemu-kvm", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:7"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 7", "packageName": "qemu-kvm-ma", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8", "packageName": "virt:rhel/qemu-kvm", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/a:redhat:advanced_virtualization:8::el8"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 8 Advanced Virtualization", "packageName": "virt:av/qemu-kvm", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}, {"cpes": ["cpe:/o:redhat:enterprise_linux:9"], "vendor": "Red Hat", "product": "Red Hat Enterprise Linux 9", "packageName": "qemu-kvm", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2024-06-12T00:00:00+00:00", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2024-10-10T00:00:00+00:00", "value": "Made public."}], "datePublic": "2024-10-10T00:00:00+00:00", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2024-6519", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292089", "name": "RHBZ#2292089", "tags": ["issue-tracking", "x_refsource_REDHAT"]}, {"url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1382/"}], "descriptions": [{"lang": "en", "value": "A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "Use After Free"}]}], "providerMetadata": {"orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "shortName": "fedora", "dateUpdated": "2024-10-21T14:36:40.115Z"}, "x_redhatCweChain": "CWE-416: Use After Free"}}, "cveMetadata": {"cveId": "CVE-2024-6519", "state": "PUBLISHED", "dateUpdated": "2024-10-21T15:49:23.239Z", "dateReserved": "2024-07-04T19:12:32.075Z", "assignerOrgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "datePublished": "2024-10-21T14:36:40.115Z", "assignerShortName": "fedora"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-6519 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-10-21T15:49:12.959240Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-21T15:49:19.478Z (string)

}

]

cna : { »

title : Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability (string)

credits : [ »

0 : { »

lang : en (string)

value : Red Hat would like to thank Cyrille Chatras (Trend Micro Zero Day Initiative) for reporting this issue. (string)

}

]

metrics : [ »

0 : { »

other : { »

type : Red Hat severity rating (string)

content : { »

value : Important (string)

namespace : https://access.redhat.com/security/updates/classification/ (string)

}

1 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : CHANGED (string)

version : 3.1 (string)

baseScore : 8.2 (number)

attackVector : LOCAL (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : HIGH (string)

confidentialityImpact : HIGH (string)

}

]

affected : [ »

0 : { »

packageName : qemu (string)

collectionURL : https://github.com/qemu/qemu (string)

defaultStatus : affected (string)

}

1 : { »

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:6 (string)

]

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 6 (string)

packageName : qemu-kvm (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

defaultStatus : unaffected (string)

}

2 : { »

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:7 (string)

]

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 7 (string)

packageName : qemu-kvm (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

defaultStatus : unaffected (string)

}

3 : { »

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:7 (string)

]

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 7 (string)

packageName : qemu-kvm-ma (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

defaultStatus : unaffected (string)

}

4 : { »

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:8 (string)

]

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 8 (string)

packageName : virt:rhel/qemu-kvm (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

defaultStatus : unaffected (string)

}

5 : { »

cpes : [ »

0 : cpe:/a:redhat:advanced_virtualization:8::el8 (string)

]

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 8 Advanced Virtualization (string)

packageName : virt:av/qemu-kvm (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

defaultStatus : unaffected (string)

}

6 : { »

cpes : [ »

0 : cpe:/o:redhat:enterprise_linux:9 (string)

]

vendor : Red Hat (string)

product : Red Hat Enterprise Linux 9 (string)

packageName : qemu-kvm (string)

collectionURL : https://access.redhat.com/downloads/content/package-browser/ (string)

defaultStatus : unaffected (string)

}

]

timeline : [ »

0 : { »

lang : en (string)

time : 2024-06-12T00:00:00+00:00 (string)

value : Reported to Red Hat. (string)

}

1 : { »

lang : en (string)

time : 2024-10-10T00:00:00+00:00 (string)

value : Made public. (string)

}

]

datePublic : 2024-10-10T00:00:00+00:00 (string)

references : [ »

0 : { »

url : https://access.redhat.com/security/cve/CVE-2024-6519 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_REDHAT (string)

]

}

1 : { »

url : https://bugzilla.redhat.com/show_bug.cgi?id=2292089 (string)

name : RHBZ#2292089 (string)

tags : [ »

0 : issue-tracking (string)

1 : x_refsource_REDHAT (string)

]

}

2 : { »

url : https://www.zerodayinitiative.com/advisories/ZDI-24-1382/ (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-416 (string)

description : Use After Free (string)

}

]

}

]

providerMetadata : { »

orgId : 92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5 (string)

shortName : fedora (string)

dateUpdated : 2024-10-21T14:36:40.115Z (string)

}

x_redhatCweChain : CWE-416: Use After Free (string)

}

cveMetadata : { »

cveId : CVE-2024-6519 (string)

state : PUBLISHED (string)

dateUpdated : 2024-10-21T15:49:23.239Z (string)

dateReserved : 2024-07-04T19:12:32.075Z (string)

assignerOrgId : 92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5 (string)

datePublished : 2024-10-21T14:36:40.115Z (string)

assignerShortName : fedora (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape."}], "id": "CVE-2024-6519", "lastModified": "2024-10-21T17:09:45.417", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.5, "impactScore": 6.0, "source": "patrick@puiterwijk.org", "type": "Secondary"}]}, "published": "2024-10-21T15:15:03.727", "references": [{"source": "patrick@puiterwijk.org", "url": "https://access.redhat.com/security/cve/CVE-2024-6519"}, {"source": "patrick@puiterwijk.org", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292089"}, {"source": "patrick@puiterwijk.org", "url": "https://www.zerodayinitiative.com/advisories/ZDI-24-1382/"}], "sourceIdentifier": "patrick@puiterwijk.org", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "patrick@puiterwijk.org", "type": "Secondary"}]}

{

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape. (string)

}

]

id : CVE-2024-6519 (string)

lastModified : 2024-10-21T17:09:45.417 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 8.2 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.5 (number)

impactScore : 6 (number)

source : patrick@puiterwijk.org (string)

type : Secondary (string)

}

]

}

published : 2024-10-21T15:15:03.727 (string)

references : [ »

0 : { »

source : patrick@puiterwijk.org (string)

url : https://access.redhat.com/security/cve/CVE-2024-6519 (string)

}

1 : { »

source : patrick@puiterwijk.org (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2292089 (string)

}

2 : { »

source : patrick@puiterwijk.org (string)

url : https://www.zerodayinitiative.com/advisories/ZDI-24-1382/ (string)

}

]

sourceIdentifier : patrick@puiterwijk.org (string)

vulnStatus : Awaiting Analysis (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-416 (string)

}

]

source : patrick@puiterwijk.org (string)

type : Secondary (string)

}

]

}

Show plain JSON

{"acknowledgement": "Red Hat would like to thank Cyrille Chatras (Trend Micro Zero Day Initiative) for reporting this issue.", "bugzilla": {"description": "QEMU: SCSI: lsi53c895a: use-after-free local privilege escalation vulnerability", "id": "2292089", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2292089"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.2", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-416", "details": ["A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape.", "A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape."], "name": "CVE-2024-6519", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "qemu-kvm", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "qemu-kvm", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "qemu-kvm-ma", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "virt:rhel/qemu-kvm", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/a:redhat:advanced_virtualization:8::el8", "fix_state": "Not affected", "package_name": "virt:av/qemu-kvm", "product_name": "Red Hat Enterprise Linux 8 Advanced Virtualization"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "qemu-kvm", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-10-10T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2024-6519\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-6519\nhttps://www.zerodayinitiative.com/advisories/ZDI-24-1382/"], "statement": "The `qemu-kvm` packages shipped in Red Hat Enterprise Linux and RHEL Advanced Virtualization are not affected by this issue because the LSI53C895A device is not enabled.\nAdditionally, LSI53C895A emulation is not used for virtualized production services. Therefore, it is unlikely to be used in association with untrusted guests.", "threat_severity": "Important"}

{

acknowledgement : Red Hat would like to thank Cyrille Chatras (Trend Micro Zero Day Initiative) for reporting this issue. (string)

bugzilla : { »

description : QEMU: SCSI: lsi53c895a: use-after-free local privilege escalation vulnerability (string)

id : 2292089 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2292089 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 8.2 (string)

cvss3_scoring_vector : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H (string)

status : draft (string)

}

cwe : CWE-416 (string)

details : [ »

0 : A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape. (string)

1 : A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape. (string)

]

name : CVE-2024-6519 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)

fix_state : Not affected (string)

package_name : qemu-kvm (string)

product_name : Red Hat Enterprise Linux 6 (string)

}

1 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Not affected (string)

package_name : qemu-kvm (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

2 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Not affected (string)

package_name : qemu-kvm-ma (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

3 : { »

cpe : cpe:/o:redhat:enterprise_linux:8 (string)

fix_state : Not affected (string)

package_name : virt:rhel/qemu-kvm (string)

product_name : Red Hat Enterprise Linux 8 (string)

}

4 : { »

cpe : cpe:/a:redhat:advanced_virtualization:8::el8 (string)

fix_state : Not affected (string)

package_name : virt:av/qemu-kvm (string)

product_name : Red Hat Enterprise Linux 8 Advanced Virtualization (string)

}

5 : { »

cpe : cpe:/o:redhat:enterprise_linux:9 (string)

fix_state : Not affected (string)

package_name : qemu-kvm (string)

product_name : Red Hat Enterprise Linux 9 (string)

}

]

public_date : 2024-10-10T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2024-6519 https://nvd.nist.gov/vuln/detail/CVE-2024-6519 https://www.zerodayinitiative.com/advisories/ZDI-24-1382/ (string)

]

statement : The `qemu-kvm` packages shipped in Red Hat Enterprise Linux and RHEL Advanced Virtualization are not affected by this issue because the LSI53C895A device is not enabled. Additionally, LSI53C895A emulation is not used for virtualized production services. Therefore, it is unlikely to be used in association with untrusted guests. (string)

threat_severity : Important (string)

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object