CVE-2017-9503: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

QEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving megasas command processing.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• Qemu Qemu: up to and including 2.9.1

Published 2017-06-16. Last modified 2026-06-17.