Lucene search
PRIOn knowledge basePRION:CVE-2016-5105HistorySep 02, 2016 - 2:59 p.m.
Command injection
2016-09-0214:59:00
PRIOn knowledge base
www.prio-n.com
5
The megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface (MFI) command.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 16.04 | |
| ubuntu_linux | eq | 12.04 | |
| ubuntu_linux | eq | 14.04 | |
| debian_linux | eq | 8.0 | |
| qemu | le | 2.6.2 |
References
www.openwall.com/lists/oss-security/2016/05/25/5
www.openwall.com/lists/oss-security/2016/05/26/7
www.ubuntu.com/usn/USN-3047-1
www.ubuntu.com/usn/USN-3047-2
bugzilla.redhat.com/show_bug.cgi?id=1339583
lists.debian.org/debian-lts-announce/2018/11/msg00038.html
lists.gnu.org/archive/html/qemu-devel/2016-05/msg04419.html
Related
nvd
nvd
CVE-2016-5105
2016-09-02 14:59:02
cve
cve
CVE-2016-5105
2016-09-02 14:59:02
debiancve
debiancve
CVE-2016-5105
2016-09-02 14:59:02
redhatcve
redhatcve
CVE-2016-5105
2016-05-27 05:49:20
ubuntucve
ubuntucve
CVE-2016-5105
2016-05-30 00:00:00
cvelist
cvelist
CVE-2016-5105
2016-09-02 14:00:00
openvas
openvas
Fedora Update for xen FEDORA-2016-cfea37952b
2016-06-08 00:00:00
Fedora Update for xen FEDORA-2016-4edd58a3b5
2016-06-14 00:00:00
Fedora Update for xen FEDORA-2016-8d3fe9914b
2016-06-08 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: xen-4.5.3-6.fc22
2016-06-12 22:54:11
[SECURITY] Fedora 24 Update: xen-4.6.1-10.fc24
2016-05-30 21:24:04
[SECURITY] Fedora 23 Update: xen-4.5.3-6.fc23
2016-06-05 02:58:46
nessus
nessus
Fedora 23 : xen (2016-8d3fe9914b)
2016-07-14 00:00:00
Fedora 22 : xen (2016-4edd58a3b5)
2016-07-14 00:00:00
Fedora 24 : xen (2016-cfea37952b)
2016-07-14 00:00:00
archlinux
archlinux
qemu-arch-extra: multiple issues
2016-06-08 00:00:00
qemu: multiple issues
2016-06-08 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in QEMU affect PowerKVM
2018-06-18 01:34:46
ubuntu
ubuntu
QEMU vulnerabilities
2016-08-04 00:00:00
QEMU regression
2016-08-12 00:00:00
suse
suse
Security update for qemu (important)
2016-10-21 19:08:51
Security update for qemu (important)
2016-10-26 14:11:23
Security update for xen (important)
2016-08-17 18:08:50
osv
osv
qemu - security update
2018-11-29 00:00:00
debian
debian
[SECURITY] [DLA 1599-1] qemu security update
2018-11-30 14:28:32