Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade libcacard-develUpgrade qemu-kvmUpgrade qemu-imgUpgrade libcacardUpgrade libcacard-tools | Jul 1, 2017 | Jun 1, 2016 |
| Debian | — | Upgrade qemu | Sep 23, 2019 | Jun 1, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 1, 2016 |
| Oracle_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade libcacard-toolsUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade libcacard-develUpgrade libcacard | Nov 9, 2016 | May 24, 2016 |
| Redhat_linux | — | Upgrade libcacard-toolsUpgrade libcacard-develUpgrade qemu-kvm-commonUpgrade libcacardUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-debuginfoUpgrade qemu-img | Aug 23, 2016 | Jun 1, 2016 |
| Suse | — | Upgrade qemu-block-iscsiUpgrade qemu-s390Upgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ppcUpgrade qemu-ui-gtkUpgrade qemu-chardev-baumUpgrade qemu-s390xUpgrade qemu-kvmUpgrade qemu-ui-spice-coreUpgrade qemu-block-curlUpgrade qemu-ui-cursesUpgrade qemu-ksmUpgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade xenUpgrade qemu-guest-agentUpgrade qemu-hw-usb-redirectUpgrade xen-kmp-defaultUpgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-microvmUpgrade qemu-x86Upgrade kvmUpgrade qemu-armUpgrade xen-toolsUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-skibootUpgrade qemu-seabiosUpgrade qemu-ui-spice-appUpgrade xen-libs-32bitUpgrade xen-doc-htmlUpgrade qemu-ipxeUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-vgaUpgrade xen-develUpgrade xen-tools-domuUpgrade qemu-langUpgrade xen-libsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-spiceUpgrade xen-kmp-paeUpgrade qemu-audio-ossUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-qxlUpgrade qemu-block-sshUpgrade qemu-chardev-spiceUpgrade qemu-ui-opengl | Aug 26, 2016 | Jun 1, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-mips | Aug 6, 2016 | Jun 1, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub