Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvmUpgrade libcacardUpgrade libcacard-develUpgrade libcacard-tools | Jul 1, 2017 | Jun 1, 2016 |
| Debian | — | Upgrade qemu | Sep 23, 2019 | Jun 1, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 1, 2016 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade libcacard-toolsUpgrade qemu-kvmUpgrade libcacardUpgrade qemu-kvm-commonUpgrade libcacard-devel | Nov 9, 2016 | May 24, 2016 |
| Redhat_linux | — | Upgrade qemu-kvm-commonUpgrade libcacardUpgrade libcacard-toolsUpgrade libcacard-develUpgrade qemu-kvm-debuginfoUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-tools | Aug 23, 2016 | Jun 1, 2016 |
| Suse | — | Upgrade qemu-chardev-baumUpgrade qemu-ui-gtkUpgrade qemu-ppcUpgrade qemu-block-curlUpgrade qemu-ksmUpgrade xen-kmp-defaultUpgrade qemu-x86Upgrade qemu-audio-alsaUpgrade qemu-s390xUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-coreUpgrade qemu-guest-agentUpgrade qemu-ui-cursesUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-kvmUpgrade qemu-hw-usb-redirectUpgrade xen-tools-domUUpgrade qemu-sgabiosUpgrade xenUpgrade qemu-s390Upgrade qemu-audio-paUpgrade qemu-microvmUpgrade qemu-vgabiosUpgrade xen-develUpgrade qemu-hw-display-virtio-vgaUpgrade kvmUpgrade qemuUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-sshUpgrade qemu-armUpgrade qemu-ui-openglUpgrade qemu-langUpgrade xen-doc-htmlUpgrade qemu-ui-spice-appUpgrade qemu-skibootUpgrade xen-libs-32bitUpgrade qemu-chardev-spiceUpgrade qemu-ipxeUpgrade qemu-hw-display-qxlUpgrade xen-kmp-paeUpgrade qemu-audio-ossUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-toolsUpgrade xen-libsUpgrade qemu-seabiosUpgrade qemu-audio-spiceUpgrade qemu-block-rbd | Aug 26, 2016 | Jun 1, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-kvm | Aug 6, 2016 | Jun 1, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub