NVD

Id
20458  
Name
CVE-2016-5107  
Description
The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
1.5  
Severity
Low  
CVSS Base Score
1.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
2.7  
CVSS Vector
(AV:L/AC:M/Au:S/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-09-02  
Modified Date
2016-11-28  
Seq
2016-5107  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
111825 20458 CVE-2016-5107 [oss-security] 20160525 CVE Request Qemu: scsi: megasas: out-of-bounds read in megasas_lookup_frame() function  View
111826 20458 CVE-2016-5107 [oss-security] 20160526 Re: CVE Request Qemu: scsi: megasas: out-of-bounds read in megasas_lookup_frame() function  View
111827 20458 CVE-2016-5107 90874  View
111828 20458 CVE-2016-5107 USN-3047-1  View
111829 20458 CVE-2016-5107 USN-3047-2  View
111830 20458 CVE-2016-5107 https://bugzilla.redhat.com/show_bug.cgi?id=1336461  View
111831 20458 CVE-2016-5107 [qemu-devel] 20160525 [Qemu-devel] [PATCH v2] scsi: megasas: check "read_queue_head" index val  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3753 JVNDB-2016-004526 QEMU の megasas_lookup_frame 関数におけるサービス運用妨害 (DoS) の脆弱性 QEMU (別名 Quick Emulator) の megasas_lookup_frame 関数には、MegaRAID SAS 8708EM2 ホストバスアダプタのエミュレーションサポートを伴いビルドされている場合、サービス運用妨害 (境界外読み取りおよびクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-5107 91613 CVE-2016-5107 20458 1.5 5.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004526.html 2016-05-25 2016-10-28 View