PT-2016-6250 · Qemu+5 · Qemu+5

Prasad Pandit

·

Publicado

2016-06-01

·

Atualizado

2024-06-15

·

CVE-2016-5126

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)
Description A heap-based buffer overflow issue exists in the iscsi aio ioctl function in block/iscsi.c, allowing local guest OS users to cause a denial of service, potentially leading to a QEMU process crash, or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALT-PU-2016-1874
ALT-PU-2017-1043
CESA-2016_1606
CVE-2016-5126
DLA-1927-1
OPENSUSE-SU-2016_2494-1
OPENSUSE-SU-2016_2497-1
OPENSUSE-SU-2016_2642-1
OPENSUSE-SU-2024:10233-1
RHSA-2016:1606
RHSA-2016:1607
RHSA-2016:1653
RHSA-2016:1654
RHSA-2016:1655
RHSA-2016:1756
RHSA-2016:1763
RHSA-2016_1606
SUSE-SU-2016:2093-1
SUSE-SU-2016:2100-1
SUSE-SU-2016:2533-1
SUSE-SU-2016:2589-1
SUSE-SU-2016:2628-1
SUSE-SU-2016:2781-1
USN-3047-1
USN-3047-2

Produtos afetados

Alt Linux
Centos
Qemu
Red Hat
Suse
Ubuntu