CVE

Id
93171  
CVE No.
CVE-2016-6351  
Status
Candidate  
Description
The esp_do_dma function in hw/scsi/esp.c in QEMU (aka Quick Emulator), when built with ESP/NCR53C9x controller emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or execute arbitrary code on the QEMU host via vectors involving DMA read into ESP command buffer.  
Phase
Assigned (20160726)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
792951 93171 CVE-2016-6351 MLIST:[oss-security] 20160726 CVE request Qemu: scsi: esp: oob write access while reading ESP command  View
792952 93171 CVE-2016-6351 URL:http://www.openwall.com/lists/oss-security/2016/07/25/14  View
792953 93171 CVE-2016-6351 MLIST:[oss-security] 20160726 Re: CVE request Qemu: scsi: esp: oob write access while reading ESP command  View
792954 93171 CVE-2016-6351 URL:http://www.openwall.com/lists/oss-security/2016/07/26/7  View
792955 93171 CVE-2016-6351 CONFIRM:http://git.qemu.org/?p=qemu.git;a=commit;h=926cde5f3e4d2504ed161ed0cb771ac7cad6fd11  View
792956 93171 CVE-2016-6351 CONFIRM:http://git.qemu.org/?p=qemu.git;a=commit;h=cc96677469388bad3d66479379735cf75db069e3  View
792957 93171 CVE-2016-6351 UBUNTU:USN-3047-1  View
792958 93171 CVE-2016-6351 URL:http://www.ubuntu.com/usn/USN-3047-1  View
792959 93171 CVE-2016-6351 UBUNTU:USN-3047-2  View
792960 93171 CVE-2016-6351 URL:http://www.ubuntu.com/usn/USN-3047-2  View
792961 93171 CVE-2016-6351 BID:92119  View

Related JVN