Name: CVE-2016-4441: Improper Restriction of Operations within the Bounds of a Memory Buffer
Creator: Rapid7
Published: 2016-05-20T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2016-4441, CWE-119, CVSS 6, EPSS 0.00099

The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.

CVSS Details

CVSS 3.1 Base Score: 6
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade qemu	Feb 20, 2019	May 20, 2016
Gentoo Linux	—	Upgrade app-emulation/qemu.	Oct 30, 2017	May 20, 2016
Suse	—	Upgrade qemu-audio-ossUpgrade xen-kmp-defaultUpgrade xen-tools-domUUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-sgabiosUpgrade qemu-skibootUpgrade qemu-armUpgrade qemu-s390Upgrade kvmUpgrade qemu-microvmUpgrade xen-doc-htmlUpgrade qemu-seabiosUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-vgaUpgrade xen-kmp-traceUpgrade qemu-ksmUpgrade qemu-audio-paUpgrade qemu-vgabiosUpgrade qemu-ui-cursesUpgrade xenUpgrade qemu-chardev-spiceUpgrade xen-libs-32bitUpgrade qemu-audio-spiceUpgrade qemu-ui-spice-appUpgrade qemu-ui-spice-coreUpgrade qemu-chardev-baumUpgrade qemu-kvmUpgrade xen-libsUpgrade xen-toolsUpgrade xen-kmp-paeUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-guest-agentUpgrade qemu-audio-alsaUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-rbdUpgrade qemu-ipxeUpgrade qemu-block-sshUpgrade qemu-block-iscsiUpgrade qemu-hw-usb-redirectUpgrade xen-doc-pdfUpgrade qemu-ppcUpgrade qemu-block-curlUpgrade qemu-toolsUpgrade qemu-hw-display-qxlUpgrade xen-develUpgrade qemu-ui-gtkUpgrade qemuUpgrade qemu-s390xUpgrade qemu-ui-openglUpgrade qemu-lang	Jun 13, 2016	May 20, 2016
Ubuntu	—	Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-misc	Aug 6, 2016	May 20, 2016

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence