CVE

Id
93976  
CVE No.
CVE-2016-7156  
Status
Candidate  
Description
The pvscsi_convert_sglist function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging an incorrect cast.  
Phase
Assigned (20160906)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
795158 93976 CVE-2016-7156 MLIST:[oss-security] 20160906 CVE request: Qemu: scsi: pvscsi: infintie loop when building SG list  View
795159 93976 CVE-2016-7156 URL:http://www.openwall.com/lists/oss-security/2016/09/06/3  View
795160 93976 CVE-2016-7156 MLIST:[oss-security] 20160906 Re: CVE request: Qemu: scsi: pvscsi: infintie loop when building SG list  View
795161 93976 CVE-2016-7156 URL:http://www.openwall.com/lists/oss-security/2016/09/07/2  View
795162 93976 CVE-2016-7156 MLIST:[qemu-devel] 20160906 [PATCH v2] scsi: pvscsi: check request descriptor SG element count  View
795163 93976 CVE-2016-7156 URL:https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg00772.html  View
795164 93976 CVE-2016-7156 MLIST:[qemu-devel] 20160906 [PATCH v3] scsi: pvscsi: avoid infinite loop while building SG list  View
795165 93976 CVE-2016-7156 URL:https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg01246.html  View
795166 93976 CVE-2016-7156 CONFIRM:http://git.qemu.org/?p=qemu.git;a=commit;h=49adc5d3f8c6bb75e55ebfeab109c5c37dea65e8  View
795167 93976 CVE-2016-7156 BID:92774  View

Related JVN