NVD

Id
20627  
Name
CVE-2016-5337  
Description
The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2016-06-14  
Modified Date
2016-11-28  
Seq
2016-5337  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
112889 20627 CVE-2016-5337 http://git.qemu.org/?p=qemu.git;a=commit;h=844864fbae66935951529408831c2f22367a57b6  View
112890 20627 CVE-2016-5337 [oss-security] 20160608 Re: CVE Request Qemu: scsi: megasas: information leakage in megasas_ctrl_get_info  View
112891 20627 CVE-2016-5337 [oss-security] 20160608 CVE Request Qemu: scsi: megasas: information leakage in megasas_ctrl_get_info  View
112892 20627 CVE-2016-5337 91097  View
112893 20627 CVE-2016-5337 USN-3047-1  View
112894 20627 CVE-2016-5337 USN-3047-2  View
112895 20627 CVE-2016-5337 [qemu-devel] 20160607 [PULL 06/13] scsi: megasas: null terminate bios version buffer  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2398 JVNDB-2016-003171 QEMU の hw/scsi/megasas.c の megasas_ctrl_get_info 関数における重要なホストメモリ情報を取得される脆弱性 QEMU の hw/scsi/megasas.c の megasas_ctrl_get_info 関数には、重要なホストメモリ情報を取得される脆弱性が存在します。 CVE-2016-5337 91843 CVE-2016-5337 20627 2.1 5.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003171.html 2016-06-07 2016-10-28 View