ISOMAN

CVE

CVE-2016-5337

The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.

Severity
MEDIUM
CVSS
5.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource

References

  1. http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=844864fbae66935951529408831c2f22367a57b6
  2. http://www.openwall.com/lists/oss-security/2016/06/08/13
  3. http://www.openwall.com/lists/oss-security/2016/06/08/3
  4. http://www.securityfocus.com/bid/91097
  5. http://www.ubuntu.com/usn/USN-3047-1
  6. http://www.ubuntu.com/usn/USN-3047-2
  7. https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
  8. https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg01969.html
  9. https://security.gentoo.org/glsa/201609-01
  10. http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=844864fbae66935951529408831c2f22367a57b6
  11. http://www.openwall.com/lists/oss-security/2016/06/08/13
  12. http://www.openwall.com/lists/oss-security/2016/06/08/3
  13. http://www.securityfocus.com/bid/91097
  14. http://www.ubuntu.com/usn/USN-3047-1
  15. http://www.ubuntu.com/usn/USN-3047-2
  16. https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
  17. https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg01969.html
  18. https://security.gentoo.org/glsa/201609-01