CVE

Id
88387  
CVE No.
CVE-2016-1568  
Status
Candidate  
Description
Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.  
Phase
Assigned (20160109)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
767121 88387 CVE-2016-1568 MLIST:[oss-security] 20160109 Qemu: ide: ahci use-after-free vulnerability in aio port commands  View
767122 88387 CVE-2016-1568 URL:http://www.openwall.com/lists/oss-security/2016/01/09/1  View
767123 88387 CVE-2016-1568 MLIST:[oss-security] 20160109 Re: Qemu: ide: ahci use-after-free vulnerability in aio port commands  View
767124 88387 CVE-2016-1568 URL:http://www.openwall.com/lists/oss-security/2016/01/09/2  View
767125 88387 CVE-2016-1568 CONFIRM:http://git.qemu.org/?p=qemu.git;a=commit;h=4ab0359a8ae182a7ac5c99609667273167703fab  View
767126 88387 CVE-2016-1568 REDHAT:RHSA-2016:0088  View
767127 88387 CVE-2016-1568 URL:http://rhn.redhat.com/errata/RHSA-2016-0088.html  View
767128 88387 CVE-2016-1568 REDHAT:RHSA-2016:0087  View
767129 88387 CVE-2016-1568 URL:http://rhn.redhat.com/errata/RHSA-2016-0087.html  View
767130 88387 CVE-2016-1568 REDHAT:RHSA-2016:0084  View
767131 88387 CVE-2016-1568 URL:http://rhn.redhat.com/errata/RHSA-2016-0084.html  View
767132 88387 CVE-2016-1568 REDHAT:RHSA-2016:0086  View
767133 88387 CVE-2016-1568 URL:http://rhn.redhat.com/errata/RHSA-2016-0086.html  View
767134 88387 CVE-2016-1568 BID:80191  View
767135 88387 CVE-2016-1568 URL:http://www.securityfocus.com/bid/80191  View
767136 88387 CVE-2016-1568 SECTRACK:1034859  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4708 JVNDB-2016-005481 Oracle Retail Applications の複数のコンポーネントにおける Security に関する脆弱性 Oracle Retail Applications の Oracle Retail Back Office、Oracle Retail Central Office、および Oracle Retail Returns Management には、Security に関する処理に不備があるため、機密性、完全性、および可用性に影響のある脆弱性が存在します。 CVE-2016-1881 88387 N/A 8.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005481.html  View