CVE

Id
91924  
CVE No.
CVE-2016-5105  
Status
Candidate  
Description
The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command.  
Phase
Assigned (20160526)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
787790 91924 CVE-2016-5105 MLIST:[oss-security] 20160525 CVE Request Qemu: scsi: megasas: stack information leakage while reading configuration  View
787791 91924 CVE-2016-5105 URL:http://www.openwall.com/lists/oss-security/2016/05/25/5  View
787792 91924 CVE-2016-5105 MLIST:[oss-security] 20160526 Re: CVE Request Qemu: scsi: megasas: stack information leakage while reading configuration  View
787793 91924 CVE-2016-5105 URL:http://www.openwall.com/lists/oss-security/2016/05/26/7  View
787794 91924 CVE-2016-5105 MLIST:[qemu-devel] 20160525 [Qemu-devel] [PATCH v2] scsi: megasas: initialise local configuration da  View
787795 91924 CVE-2016-5105 URL:https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04419.html  View
787796 91924 CVE-2016-5105 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1339583  View
787797 91924 CVE-2016-5105 UBUNTU:USN-3047-1  View
787798 91924 CVE-2016-5105 URL:http://www.ubuntu.com/usn/USN-3047-1  View
787799 91924 CVE-2016-5105 UBUNTU:USN-3047-2  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4077 JVNDB-2016-004850 libarchive のサンドボックスコードにおける任意のファイルに書き込まれる脆弱性 libarchive のサンドボックスコードは、0 以外のデータサイズのハードリンクアーカイブのエントリを誤って処理するため、任意のファイルに書き込まれる脆弱性が存在します。 CVE-2016-5418 91924 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004850.html  View