NVD

Id
20456  
Name
CVE-2016-5105  
Description
The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-09-02  
Modified Date
2016-09-09  
Seq
2016-5105  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
111813 20456 CVE-2016-5105 [oss-security] 20160525 CVE Request Qemu: scsi: megasas: stack information leakage while reading configuration  View
111814 20456 CVE-2016-5105 [oss-security] 20160526 Re: CVE Request Qemu: scsi: megasas: stack information leakage while reading configuration  View
111815 20456 CVE-2016-5105 USN-3047-1  View
111816 20456 CVE-2016-5105 USN-3047-2  View
111817 20456 CVE-2016-5105 https://bugzilla.redhat.com/show_bug.cgi?id=1339583  View
111818 20456 CVE-2016-5105 [qemu-devel] 20160525 [Qemu-devel] [PATCH v2] scsi: megasas: initialise local configuration da  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3751 JVNDB-2016-004524 QEMU の hw/scsi/megasas.c の megasas_dcmd_cfg_read 関数におけるホストメモリを読まれる脆弱性 QEMU (別名 Quick Emulator) の hw/scsi/megasas.c の megasas_dcmd_cfg_read 関数は、MegaRAID SAS 8708EM2 ホストバスアダプタのエミュレーションサポートを伴いビルドされている場合、初期化されていない変数 (uninitialized variable) を使用するため、ホストメモリを読まれる脆弱性が存在します。 CVE-2016-5105 91611 CVE-2016-5105 20456 1.9 4.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004524.html 2016-05-25 2016-10-28 View