Lucene search
PRIOn knowledge basePRION:CVE-2016-5238HistoryJun 14, 2016 - 2:59 p.m.
Out-of-bounds
2016-06-1414:59:00
PRIOn knowledge base
www.prio-n.com
7
The get_cmd function in hw/scsi/esp.c in QEMU might allow local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to reading from the information transfer buffer in non-DMA mode.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 16.04 | |
| ubuntu_linux | eq | 12.04 | |
| ubuntu_linux | eq | 14.04 | |
| debian_linux | eq | 8.0 | |
| qemu | le | 2.6.2 |
References
www.openwall.com/lists/oss-security/2016/06/02/2
www.openwall.com/lists/oss-security/2016/06/02/9
www.securityfocus.com/bid/90995
www.ubuntu.com/usn/USN-3047-1
www.ubuntu.com/usn/USN-3047-2
bugzilla.redhat.com/show_bug.cgi?id=1341931
lists.debian.org/debian-lts-announce/2018/11/msg00038.html
lists.gnu.org/archive/html/qemu-devel/2016-05/msg05691.html
lists.gnu.org/archive/html/qemu-devel/2016-06/msg00150.html
security.gentoo.org/glsa/201609-01
Related
cvelist
cvelist
CVE-2016-5238
2016-06-14 14:00:00
redhatcve
redhatcve
CVE-2016-5238
2016-06-02 18:48:46
nvd
nvd
CVE-2016-5238
2016-06-14 14:59:00
debiancve
debiancve
CVE-2016-5238
2016-06-14 14:59:00
ubuntucve
ubuntucve
CVE-2016-5238
2016-06-14 00:00:00
cve
cve
CVE-2016-5238
2016-06-14 14:59:00
openvas
openvas
Fedora Update for xen FEDORA-2016-389be30b95
2016-06-19 00:00:00
Fedora Update for xen FEDORA-2016-103752d2a9
2016-06-18 00:00:00
Fedora Update for qemu FEDORA-2016-ea3002b577
2016-07-10 00:00:00
nessus
nessus
Fedora 24 : xen (2016-389be30b95)
2016-07-14 00:00:00
Fedora 23 : xen (2016-103752d2a9)
2016-07-14 00:00:00
Fedora 22 : 2:qemu (2016-ea3002b577)
2016-07-15 00:00:00
fedora
fedora
[SECURITY] Fedora 24 Update: xen-4.6.1-11.fc24
2016-06-18 19:34:42
[SECURITY] Fedora 23 Update: xen-4.5.3-8.fc23
2016-06-17 16:02:42
[SECURITY] Fedora 23 Update: qemu-2.4.1-11.fc23
2016-07-02 19:35:10
ubuntu
ubuntu
QEMU vulnerabilities
2016-08-04 00:00:00
QEMU regression
2016-08-12 00:00:00
suse
suse
Security update for xen (important)
2016-10-13 20:08:40
Security update for qemu (important)
2016-10-21 19:08:51
Security update for qemu (important)
2016-10-26 14:11:23
ibm
ibm
Security Bulletin: Multiple vulnerabilities in qemu affect PowerKVM
2018-06-18 01:33:29
gentoo
gentoo
QEMU: Multiple vulnerabilities
2016-09-25 00:00:00
osv
osv
qemu - security update
2018-11-29 00:00:00
debian
debian
[SECURITY] [DLA 1599-1] qemu security update
2018-11-30 14:28:32