CVE

Id
95488  
CVE No.
CVE-2016-8668  
Status
Candidate  
Description
The rocker_io_writel function in hw/net/rocker/rocker.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging failure to limit DMA buffer size.  
Phase
Assigned (20161015)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
798620 95488 CVE-2016-8668 MLIST:[oss-security] 20161014 CVE request Qemu: net: OOB buffer access in rocker switch emulation  View
798621 95488 CVE-2016-8668 URL:http://www.openwall.com/lists/oss-security/2016/10/14/8  View
798622 95488 CVE-2016-8668 MLIST:[oss-security] 20161015 Re: CVE request Qemu: net: OOB buffer access in rocker switch emulation  View
798623 95488 CVE-2016-8668 URL:http://www.openwall.com/lists/oss-security/2016/10/15/9  View
798624 95488 CVE-2016-8668 MLIST:[qemu-devel] 20161012 [PATCH] net: rocker: set limit to DMA buffer size  View
798625 95488 CVE-2016-8668 URL:https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg02501.html  View
798626 95488 CVE-2016-8668 SUSE:openSUSE-SU-2016:3237  View
798627 95488 CVE-2016-8668 URL:http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html  View
798628 95488 CVE-2016-8668 BID:93566  View

Related JVN