CVE-2019-6501

In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and...

5.5 MediumFix available

In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.56%Down 1.1 points since Apr 14, 2021

What each source reports

NVD Score used 5.5

In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.

Record: CVE-2019-6501
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-125, CWE-787
Updated: 2026-11-02

CVE List No score

In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.

Record: CVE-2019-6501
Updated: 2026-11-02

EUVDEUVD-2019-16060 No score

In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.

Record: EUVD-2019-16060
Updated: 2026-11-03

GitHub AdvisoriesGHSA-rhjv-54vx-5mjg 5.5

In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and...

In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.

Record: GHSA-rhjv-54vx-5mjg
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-125
Updated: 2026-11-02

OSVBELL-CVE-2019-6501 5.5

CVE-2019-6501 does not affect BellSoft software

Record: BELL-CVE-2019-6501
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSV 5.5

In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.

Record: CVE-2019-6501
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 4 moreShow less

OSVDEBIAN-CVE-2019-6501 5.5

In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.

Record: DEBIAN-CVE-2019-6501
CVSS 3.0: 5.5 MediumCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVRHSA-2019:2166 6.5

Red Hat Security Advisory: qemu-kvm-ma security and bug fix update

Record: RHSA-2019:2166
CVSS 3.0: 6.5 MediumCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated: 2026-11-02

OSVRHSA-2019:2425 7.8

Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update

Record: RHSA-2019:2425
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2019:2553 7.0

Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update

Record: RHSA-2019:2553
CVSS 3.0: 7.0 HighCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`qemu` Debian:12	before 1:3.1+dfsg-3	1:3.1+dfsg-3
`qemu` Debian:13	before 1:3.1+dfsg-3	1:3.1+dfsg-3
`qemu` Debian:14	before 1:3.1+dfsg-3	1:3.1+dfsg-3
`qemu-img-ma` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-common-ma` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-ma` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-ma-debuginfo` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-tools-ma` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-img-rhev` Red Hat:openstack:10::el7 From an advisory covering 6 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-common-rhev` Red Hat:openstack:10::el7 From an advisory covering 6 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7

Show 23 moreShow less

Affected packages
Package	Affected	Fixed
`qemu-kvm-rhev` Red Hat:openstack:10::el7 From an advisory covering 6 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-rhev-debuginfo` Red Hat:openstack:10::el7 From an advisory covering 6 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-tools-rhev` Red Hat:openstack:10::el7 From an advisory covering 6 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-img-rhev` Red Hat:openstack:13::el7 From an advisory covering 6 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-common-rhev` Red Hat:openstack:13::el7 From an advisory covering 6 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-rhev` Red Hat:openstack:13::el7 From an advisory covering 6 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-rhev-debuginfo` Red Hat:openstack:13::el7 From an advisory covering 6 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-tools-rhev` Red Hat:openstack:13::el7 From an advisory covering 6 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-img-rhev` Red Hat:openstack:14::el7 From an advisory covering 6 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-common-rhev` Red Hat:openstack:14::el7 From an advisory covering 6 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-rhev` Red Hat:openstack:14::el7 From an advisory covering 6 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-rhev-debuginfo` Red Hat:openstack:14::el7 From an advisory covering 6 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-tools-rhev` Red Hat:openstack:14::el7 From an advisory covering 6 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-img-rhev` Red Hat:enterprise_linux:7::hypervisor From an advisory covering 9 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-common-rhev` Red Hat:enterprise_linux:7::hypervisor From an advisory covering 9 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-rhev` Red Hat:enterprise_linux:7::hypervisor From an advisory covering 9 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-rhev-debuginfo` Red Hat:enterprise_linux:7::hypervisor From an advisory covering 9 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-tools-rhev` Red Hat:enterprise_linux:7::hypervisor From an advisory covering 9 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-img-rhev` Red Hat:rhev_manager:4.3 From an advisory covering 9 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-common-rhev` Red Hat:rhev_manager:4.3 From an advisory covering 9 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-rhev` Red Hat:rhev_manager:4.3 From an advisory covering 9 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-rhev-debuginfo` Red Hat:rhev_manager:4.3 From an advisory covering 9 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7
`qemu-kvm-tools-rhev` Red Hat:rhev_manager:4.3 From an advisory covering 9 CVEs	before 10:2.12.0-33.el7	10:2.12.0-33.el7

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-6501 is a medium vulnerability (CVSS 5.5) in Qemu, published March 17, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 46th percentile. Fixed in qemu 1:3.1+dfsg-3.

References

Show 109 moreShow less