CVE-2024-6519

Published Oct 21, 2024

Last updated 6 months ago

CVSS high 8.2

Overview

Description
A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape.
Source
patrick@puiterwijk.org
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
8.2
Impact score
6
Exploitability score
1.5
Vector string
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Severity
HIGH

Weaknesses

patrick@puiterwijk.org
CWE-416

Social media

Hype score
Not currently trending

  1. 🔴New vulnerability was just published🔴 CVE ➡️ CVE-2024-6519 Impacting ➡️ QEMU CVSS ➡️ 8.2 #cve #securitricks #vulnerability #cybersecurity https://t.co/WZUxX7vsNS

    @SecuriTricks

    21 Oct 2024

    8 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. CVE-2024-6519 A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape. https://t.co/eUrruKPyP8

    @CVEnew

    21 Oct 2024

    487 Impressions

    0 Retweets

    1 Like

    1 Bookmark

    0 Replies

    0 Quotes

  3. [ZDI-24-1382|CVE-2024-6519] QEMU SCSI Use-After-Free Local Privilege Escalation Vulnerability (CVSS 8.2; Credit: Cyrille Chatras) https://t.co/HoHGLPAAv3

    @TheZDIBugs

    2628 Impressions

    9 Retweets

    22 Likes

    7 Bookmarks

    0 Replies

    0 Quotes

References