CVE

Id
91926  
CVE No.
CVE-2016-5107  
Status
Candidate  
Description
The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors.  
Phase
Assigned (20160526)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
787810 91926 CVE-2016-5107 MLIST:[oss-security] 20160525 CVE Request Qemu: scsi: megasas: out-of-bounds read in megasas_lookup_frame() function  View
787811 91926 CVE-2016-5107 URL:http://www.openwall.com/lists/oss-security/2016/05/25/7  View
787812 91926 CVE-2016-5107 MLIST:[oss-security] 20160526 Re: CVE Request Qemu: scsi: megasas: out-of-bounds read in megasas_lookup_frame() function  View
787813 91926 CVE-2016-5107 URL:http://www.openwall.com/lists/oss-security/2016/05/26/9  View
787814 91926 CVE-2016-5107 MLIST:[qemu-devel] 20160525 [Qemu-devel] [PATCH v2] scsi: megasas: check "read_queue_head" index val  View
787815 91926 CVE-2016-5107 URL:https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04424.html  View
787816 91926 CVE-2016-5107 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1336461  View
787817 91926 CVE-2016-5107 UBUNTU:USN-3047-1  View
787818 91926 CVE-2016-5107 URL:http://www.ubuntu.com/usn/USN-3047-1  View
787819 91926 CVE-2016-5107 UBUNTU:USN-3047-2  View
787820 91926 CVE-2016-5107 URL:http://www.ubuntu.com/usn/USN-3047-2  View
787821 91926 CVE-2016-5107 BID:90874  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
3617 JVNDB-2016-004390 cURL および libcurl における接続認証をハイジャックされる脆弱性 cURL および libcurl は、再利用に TLS 接続を選択する際、クライアント証明書をチェックしないため、接続認証をハイジャックされる脆弱性が存在します。 CVE-2016-5420 91926 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004390.html  View