NVD

Id
20567  
Name
CVE-2016-5238  
Description
The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to reading from the information transfer buffer in non-DMA mode.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-06-14  
Modified Date
2016-11-28  
Seq
2016-5238  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
112545 20567 CVE-2016-5238 [oss-security] 20160602 CVE Request Qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd  View
112546 20567 CVE-2016-5238 [oss-security] 20160602 Re: CVE Request Qemu: scsi: esp: OOB write when using non-DMA mode in get_cmd  View
112547 20567 CVE-2016-5238 90995  View
112548 20567 CVE-2016-5238 USN-3047-1  View
112549 20567 CVE-2016-5238 USN-3047-2  View
112550 20567 CVE-2016-5238 https://bugzilla.redhat.com/show_bug.cgi?id=1341931  View
112551 20567 CVE-2016-5238 [qemu-devel] 20160531 [Qemu-devel] [PATCH] scsi: check buffer length before reading scsi command  View
112552 20567 CVE-2016-5238 [qemu-devel] 20160601 Re: [Qemu-devel] [PATCH] scsi: check buffer length before reading scsi command  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2399 JVNDB-2016-003172 QEMU の hw/scsi/esp.c の get_cmd 関数におけるサービス運用妨害 (DoS) の脆弱性 QEMU の hw/scsi/esp.c の get_cmd 関数には、サービス運用妨害 (境界外書き込みおよび QEMU プロセスクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-5238 91744 CVE-2016-5238 20567 2.1 5.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003172.html 2016-05-31 2016-10-28 View