Lucene search
PRIOn knowledge basePRION:CVE-2016-6351HistorySep 07, 2016 - 6:59 p.m.
Command injection
2016-09-0718:59:00
PRIOn knowledge base
www.prio-n.com
6
The esp_do_dma function in hw/scsi/esp.c in QEMU (aka Quick Emulator), when built with ESP/NCR53C9x controller emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or execute arbitrary code on the QEMU host via vectors involving DMA read into ESP command buffer.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 16.04 | |
| ubuntu_linux | eq | 12.04 | |
| ubuntu_linux | eq | 14.04 | |
| debian_linux | eq | 8.0 | |
| qemu | le | 2.6.2 |
References
git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=926cde5f3e4d2504ed161ed0cb771ac7cad6fd11
git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=cc96677469388bad3d66479379735cf75db069e3
www.openwall.com/lists/oss-security/2016/07/25/14
www.openwall.com/lists/oss-security/2016/07/26/7
www.securityfocus.com/bid/92119
www.ubuntu.com/usn/USN-3047-1
www.ubuntu.com/usn/USN-3047-2
lists.debian.org/debian-lts-announce/2018/11/msg00038.html
Related
nvd
nvd
CVE-2016-6351
2016-09-07 18:59:04
redhatcve
redhatcve
CVE-2016-6351
2016-07-27 06:48:19
cvelist
cvelist
CVE-2016-6351
2016-09-07 18:00:00
cve
cve
CVE-2016-6351
2016-09-07 18:59:04
ubuntucve
ubuntucve
CVE-2016-6351
2016-07-27 00:00:00
debiancve
debiancve
CVE-2016-6351
2016-09-07 18:59:04
nessus
nessus
Fedora 24 : xen (2016-01cc766201) (Bunker Buster)
2016-08-08 00:00:00
Fedora 23 : xen (2016-0049aa6e5d) (Bunker Buster)
2016-08-09 00:00:00
Debian DLA-574-1 : qemu-kvm security update
2016-07-12 00:00:00
fedora
fedora
[SECURITY] Fedora 23 Update: xen-4.5.3-9.fc23
2016-08-08 23:59:11
[SECURITY] Fedora 24 Update: xen-4.6.3-4.fc24
2016-08-05 21:00:09
[SECURITY] Fedora 24 Update: qemu-2.6.2-2.fc24
2016-10-18 15:55:39
openvas
openvas
Fedora Update for xen FEDORA-2016-0049aa6e5d
2016-08-09 00:00:00
Fedora Update for xen FEDORA-2016-01cc766201
2016-08-06 00:00:00
Debian: Security Advisory (DLA-573-1)
2023-03-08 00:00:00
debian
debian
[SECURITY] [DLA 574-1] qemu-kvm security update
2016-07-30 10:43:04
[SECURITY] [DLA 573-1] qemu security update
2016-07-30 10:22:30
[SECURITY] [DLA 1599-1] qemu security update
2018-11-30 14:28:32
osv
osv
qemu - security update
2016-07-30 00:00:00
qemu-kvm - security update
2016-07-30 00:00:00
qemu - security update
2018-11-29 00:00:00
ubuntu
ubuntu
QEMU vulnerabilities
2016-08-04 00:00:00
QEMU regression
2016-08-12 00:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in QEMU affect PowerKVM
2018-06-18 01:34:46
suse
suse
Security update for xen (important)
2016-12-07 20:07:43
Security update for xen (important)
2016-11-04 15:11:21
Security update for xen (important)
2016-08-17 18:08:50