CVE

Id
91925  
CVE No.
CVE-2016-5106  
Status
Candidate  
Description
The megasas_dcmd_set_properties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of service (out-of-bounds write access) via vectors involving a MegaRAID Firmware Interface (MFI) command.  
Phase
Assigned (20160526)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
787800 91925 CVE-2016-5106 MLIST:[oss-security] 20160525 CVE Request Qemu: scsi: megasas: out-of-bounds write while setting controller properties  View
787801 91925 CVE-2016-5106 URL:http://www.openwall.com/lists/oss-security/2016/05/25/6  View
787802 91925 CVE-2016-5106 MLIST:[oss-security] 20160526 Re: CVE Request Qemu: scsi: megasas: out-of-bounds write while setting controller properties  View
787803 91925 CVE-2016-5106 URL:http://www.openwall.com/lists/oss-security/2016/05/26/8  View
787804 91925 CVE-2016-5106 MLIST:[qemu-devel] 20160525 [Qemu-devel] [PATCH 1/3] scsi: megasas: use appropriate property buffer  View
787805 91925 CVE-2016-5106 URL:https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04340.html  View
787806 91925 CVE-2016-5106 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1339578  View
787807 91925 CVE-2016-5106 UBUNTU:USN-3047-1  View
787808 91925 CVE-2016-5106 URL:http://www.ubuntu.com/usn/USN-3047-1  View
787809 91925 CVE-2016-5106 UBUNTU:USN-3047-2  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3616 JVNDB-2016-004389 cURL および libcurl における制限を回避される脆弱性 cURL および libcurl は、クライアント証明書が変更された場合、TLS セッションの再開を阻止しないため、制限を回避される脆弱性が存在します。 CVE-2016-5419 91925 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004389.html  View