CVE

Id
93977  
CVE No.
CVE-2016-7157  
Status
Candidate  
Description
The (1) mptsas_config_manufacturing_1 and (2) mptsas_config_ioc_0 functions in hw/scsi/mptconfig.c in QEMU (aka Quick Emulator) allow local guest OS administrators to cause a denial of service (QEMU process crash) via vectors involving MPTSAS_CONFIG_PACK.  
Phase
Assigned (20160906)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
795168 93977 CVE-2016-7157 MLIST:[oss-security] 20160906 CVE Request Qemu: scsi: mptsas: invalid memory access while building configuration pages  View
795169 93977 CVE-2016-7157 URL:http://www.openwall.com/lists/oss-security/2016/09/06/4  View
795170 93977 CVE-2016-7157 MLIST:[oss-security] 20160906 Re: CVE Request Qemu: scsi: mptsas: invalid memory access while building configuration pages  View
795171 93977 CVE-2016-7157 URL:http://www.openwall.com/lists/oss-security/2016/09/07/3  View
795172 93977 CVE-2016-7157 MLIST:[qemu-devel] 20160831 [PATCH 1/2] scsi: mptconfig: fix format string  View
795173 93977 CVE-2016-7157 URL:https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg04295.html  View
795174 93977 CVE-2016-7157 MLIST:[qemu-devel] 20160831 [PATCH 2/2] scsi: mptconfig: fix an assert expression  View
795175 93977 CVE-2016-7157 URL:https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg04296.html  View
795176 93977 CVE-2016-7157 CONFIRM:http://git.qemu.org/?p=qemu.git;a=commit;h=65a8e1f6413a0f6f79894da710b5d6d43361d27d  View
795177 93977 CVE-2016-7157 BID:92775  View

Related JVN