NVD

Id
17934  
Name
CVE-2016-1568  
Description
Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-04-11  
Modified Date
2016-12-02  
Seq
2016-1568  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
98148 17934 CVE-2016-1568 http://git.qemu.org/?p=qemu.git;a=commit;h=4ab0359a8ae182a7ac5c99609667273167703fab  View
98149 17934 CVE-2016-1568 RHSA-2016:0084  View
98150 17934 CVE-2016-1568 RHSA-2016:0086  View
98151 17934 CVE-2016-1568 RHSA-2016:0087  View
98152 17934 CVE-2016-1568 RHSA-2016:0088  View
98153 17934 CVE-2016-1568 [oss-security] 20160109 Qemu: ide: ahci use-after-free vulnerability in aio port commands  View
98154 17934 CVE-2016-1568 [oss-security] 20160109 Re: Qemu: ide: ahci use-after-free vulnerability in aio port commands  View
98155 17934 CVE-2016-1568 80191  View
98156 17934 CVE-2016-1568 1034859  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1316 JVNDB-2016-002089 QEMU の hw/ide/ahci.c におけるサービス運用妨害 (DoS) の脆弱性 QEMU の hw/ide/ahci.c には、IDE AHCI エミュレーションサポートでビルドされている場合、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (インスタンスクラッシュ) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2016-1568 88074 CVE-2016-1568 17934 9.3 8.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002089.html 2016-01-11 2016-06-30 View