{"id":"CVE-2019-6501","aliases":["BELL-CVE-2019-6501","DEBIAN-CVE-2019-6501","EUVD-2019-16060","GHSA-rhjv-54vx-5mjg","RHSA-2019:2166","RHSA-2019:2425","RHSA-2019:2553"],"status":"published","title":"In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and...","description":"In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00556,"percentile":0.46611,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125","CWE-787"],"published":"2019-03-17T16:51:48Z","modified":"2026-10-24T10:30:54Z","fixes":[{"ecosystem":"Debian:12","package":"qemu","fixed_in":["1:3.1+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"qemu","fixed_in":["1:3.1+dfsg-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"qemu","fixed_in":["1:3.1+dfsg-3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1+dfsg-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"qemu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.1+dfsg-3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"qemu-img-ma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"qemu-kvm-common-ma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"qemu-kvm-ma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"qemu-kvm-ma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"qemu-kvm-tools-ma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"qemu-img-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"qemu-kvm-common-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"qemu-kvm-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"qemu-kvm-rhev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openstack:10::el7","package":"qemu-kvm-tools-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"qemu-img-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"qemu-kvm-common-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"qemu-kvm-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"qemu-kvm-rhev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openstack:13::el7","package":"qemu-kvm-tools-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"qemu-img-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"qemu-kvm-common-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"qemu-kvm-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"qemu-kvm-rhev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openstack:14::el7","package":"qemu-kvm-tools-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"qemu-img-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"qemu-kvm-common-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"qemu-kvm-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"qemu-kvm-rhev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::hypervisor","package":"qemu-kvm-tools-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"qemu-img-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"qemu-kvm-common-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"qemu-kvm-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"qemu-kvm-rhev-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.3","package":"qemu-kvm-tools-rhev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10:2.12.0-33.el7"}]}],"bundled":9}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"qemu","product":"qemu"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2019/01/24/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"https://lists.gnu.org/archive/html/qemu-devel/2019-01/msg02324.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Exploit","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJMTVGDLA654HNCDGLCUEIP36SNJEKK7/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20190411-0006/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2166","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2425","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2019:2553","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6501","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJMTVGDLA654HNCDGLCUEIP36SNJEKK7/"},{"url":"https://github.com/advisories/GHSA-rhjv-54vx-5mjg"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2019-6501","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2019-6501","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/7.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636777","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1678898","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2166.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17963","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17963","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17963","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-6501","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-6501","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1678515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728358","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728359","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1728360","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2425.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-15746","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-15746","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-15746","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-17958","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-17958","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-17958","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-6778","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-6778","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-6778","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-9824","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9824","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9824","tags":["advisory"]},{"url":"https://access.redhat.com/security/vulnerabilities/mds","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1508708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1526313","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1551486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1585155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1597482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1598119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1603104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1608226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1610461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614302","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1614610","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1619778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1620373","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1623986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1624009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1627272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1628098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1629056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1629717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1629720","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631227","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1631877","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1633150","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1633536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1642551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1646784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1648236","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656913","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1666336","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1666884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1667320","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1667782","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668956","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1672010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1673080","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1673397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1673402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1676728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1677073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691563","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1692018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1693101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703916","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1705312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1714160","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2019/rhsa-2019_2553.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12126","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12126","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12126","tags":["advisory"]},{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00233.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12127","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12127","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12127","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-12130","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-12130","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-12130","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-20815","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20815","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20815","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11091","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11091","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2019-6501","description":"In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.","status":"published","published":"2019-03-17T16:51:48Z","modified":"2024-08-04T20:23:22.063Z","updated_at":"2026-11-02T14:20:23.381621Z"}],"euvd":[{"id":"EUVD-2019-16060","description":"In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.","status":"published","published":"2019-03-17T16:51:48Z","modified":"2024-08-04T20:23:22Z","updated_at":"2026-11-03T03:06:49.204502Z"}],"ghsa":[{"id":"GHSA-rhjv-54vx-5mjg","title":"In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and...","description":"In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.","status":"published","published":"2022-05-14T00:54:21Z","modified":"2023-02-02T05:02:42Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:51:29.873049Z"}],"nvd":[{"id":"CVE-2019-6501","description":"In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.","status":"published","published":"2019-03-21T16:01:08.78Z","modified":"2026-06-17T02:39:09.007Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-125","CWE-787"],"updated_at":"2026-11-02T14:05:07.268578Z"}],"osv":[{"id":"BELL-CVE-2019-6501","title":"CVE-2019-6501 does not affect BellSoft software","status":"withdrawn","published":"2019-03-21T16:01:00Z","modified":"2026-01-26T09:46:39.083435Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:15.340685Z"},{"id":"CVE-2019-6501","description":"In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.","status":"published","published":"2019-03-21T16:01:08.78Z","modified":"2026-10-24T10:30:54.388445652Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:12.675558Z"},{"id":"DEBIAN-CVE-2019-6501","description":"In QEMU 3.1, scsi_handle_inquiry_reply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations.","status":"published","published":"2019-03-21T16:01:08.78Z","modified":"2026-09-21T07:03:21.56350178Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:32.57265Z"},{"id":"RHSA-2019:2166","title":"Red Hat Security Advisory: qemu-kvm-ma security and bug fix update","status":"published","published":"2024-09-13T22:00:19Z","modified":"2026-06-29T10:25:50Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2425","title":"Red Hat Security Advisory: qemu-kvm-rhev security and bug fix update","status":"published","published":"2024-09-13T22:00:54Z","modified":"2026-06-28T10:31:16Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"},{"id":"RHSA-2019:2553","title":"Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update","status":"published","published":"2024-09-13T22:00:01Z","modified":"2026-06-28T10:31:32Z","cvss":[{"version":"3.0","score":7,"vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:06.0195Z"}]}}