CVE

Id
94243  
CVE No.
CVE-2016-7423  
Status
Candidate  
Description
The mptsas_process_scsi_io_request function in QEMU (aka Quick Emulator), when built with LSI SAS1068 Host Bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors involving MPTSASRequest objects.  
Phase
Assigned (20160909)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
796006 94243 CVE-2016-7423 MLIST:[oss-security] 20160916 CVE request Qemu: scsi: mptsas: OOB access when freeing MPTSASRequest object  View
796007 94243 CVE-2016-7423 URL:http://www.openwall.com/lists/oss-security/2016/09/16/5  View
796008 94243 CVE-2016-7423 MLIST:[oss-security] 20160916 Re: CVE request Qemu: scsi: mptsas: OOB access when freeing MPTSASRequest object  View
796009 94243 CVE-2016-7423 URL:http://www.openwall.com/lists/oss-security/2016/09/16/11  View
796010 94243 CVE-2016-7423 MLIST:[qemu-devel] 20160915 [PULL 03/17] scsi: mptsas: use g_new0 to allocate MPTSASRequest object  View
796011 94243 CVE-2016-7423 URL:https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg03604.html  View
796012 94243 CVE-2016-7423 CONFIRM:http://git.qemu.org/?p=qemu.git;a=commit;h=670e56d3ed2918b3861d9216f2c0540d9e9ae0d5  View
796013 94243 CVE-2016-7423 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1376776  View
796014 94243 CVE-2016-7423 BID:92997  View

Related JVN