CVE

Id
92157  
CVE No.
CVE-2016-5338  
Status
Candidate  
Description
The (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allow local guest OS administrators to cause a denial of service (QEMU process crash) or execute arbitrary code on the QEMU host via vectors related to the information transfer buffer.  
Phase
Assigned (20160608)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
789487 92157 CVE-2016-5338 MLIST:[oss-security] 20160607 CVE Request Qemu: scsi: esp: OOB r/w access while processing ESP_FIFO  View
789488 92157 CVE-2016-5338 URL:http://www.openwall.com/lists/oss-security/2016/06/07/3  View
789489 92157 CVE-2016-5338 MLIST:[oss-security] 20160608 Re: CVE Request Qemu: scsi: esp: OOB r/w access while processing ESP_FIFO  View
789490 92157 CVE-2016-5338 URL:http://www.openwall.com/lists/oss-security/2016/06/08/14  View
789491 92157 CVE-2016-5338 MLIST:[qemu-devel] 20160606 [Qemu-devel] [PATCH v3] scsi: esp: check TI buffer index before read/write  View
789492 92157 CVE-2016-5338 URL:https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg01507.html  View
789493 92157 CVE-2016-5338 CONFIRM:http://git.qemu.org/?p=qemu.git;a=commit;h=ff589551c8e8e9e95e211b9d8daafb4ed39f1aec  View
789494 92157 CVE-2016-5338 UBUNTU:USN-3047-1  View
789495 92157 CVE-2016-5338 URL:http://www.ubuntu.com/usn/USN-3047-1  View
789496 92157 CVE-2016-5338 UBUNTU:USN-3047-2  View
789497 92157 CVE-2016-5338 URL:http://www.ubuntu.com/usn/USN-3047-2  View
789498 92157 CVE-2016-5338 BID:91079  View

Related JVN