Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libcacard-develUpgrade libcacard-toolsUpgrade qemu-kvmUpgrade qemu-imgUpgrade libcacardUpgrade qemu-kvm-commonUpgrade qemu-kvm-tools | Jul 1, 2017 | Jun 1, 2016 |
| Debian | — | Upgrade qemu | Sep 23, 2019 | Jun 1, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 1, 2016 |
| Oracle_linux | — | Upgrade libcacard-toolsUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade libcacard-develUpgrade libcacardUpgrade qemu-kvm-common | Nov 9, 2016 | May 24, 2016 |
| Redhat_linux | — | Upgrade qemu-kvm-commonUpgrade libcacard-toolsUpgrade libcacard-develUpgrade libcacardUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-img | Aug 23, 2016 | Jun 1, 2016 |
| Suse | — | Upgrade qemu-sgabiosUpgrade qemu-vgabiosUpgrade qemu-ui-cursesUpgrade qemu-ksmUpgrade qemu-s390xUpgrade qemu-audio-alsaUpgrade xen-kmp-defaultUpgrade qemu-ui-spice-coreUpgrade qemu-audio-paUpgrade qemu-block-curlUpgrade qemu-guest-agentUpgrade xenUpgrade qemu-kvmUpgrade qemu-chardev-baumUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-microvmUpgrade qemu-ui-gtkUpgrade qemu-hw-usb-redirectUpgrade qemu-x86Upgrade qemu-block-iscsiUpgrade qemu-s390Upgrade qemu-ppcUpgrade qemu-audio-ossUpgrade qemu-armUpgrade qemu-toolsUpgrade qemu-ui-spice-appUpgrade qemu-block-sshUpgrade qemu-ui-openglUpgrade qemu-ipxeUpgrade xen-toolsUpgrade qemu-seabiosUpgrade xen-doc-htmlUpgrade qemu-hw-display-virtio-gpuUpgrade xen-libs-32bitUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-hw-display-virtio-vgaUpgrade xen-libsUpgrade qemu-chardev-spiceUpgrade qemu-langUpgrade xen-tools-domuUpgrade qemu-skibootUpgrade xen-develUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-spiceUpgrade kvmUpgrade qemu-hw-display-qxlUpgrade xen-kmp-pae | Aug 26, 2016 | Jun 1, 2016 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-kvmUpgrade qemu-system-miscUpgrade qemu-system-aarch64 | Aug 6, 2016 | Jun 1, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub