Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade libcacardUpgrade libcacard-toolsUpgrade qemu-kvmUpgrade libcacard-devel | Jul 1, 2017 | Jun 1, 2016 |
| Debian | — | Upgrade qemu | Sep 23, 2019 | Jun 1, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Jun 1, 2016 |
| Oracle_linux | — | Upgrade libcacard-develUpgrade qemu-kvm-commonUpgrade libcacardUpgrade qemu-imgUpgrade libcacard-toolsUpgrade qemu-kvm-toolsUpgrade qemu-kvm | Nov 9, 2016 | May 24, 2016 |
| Redhat_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade libcacard-toolsUpgrade libcacard-develUpgrade libcacardUpgrade qemu-kvm-common | Aug 23, 2016 | Jun 1, 2016 |
| Suse | — | Upgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-s390xUpgrade qemu-vgabiosUpgrade qemu-microvmUpgrade qemu-ksmUpgrade xen-tools-domUUpgrade qemu-kvmUpgrade qemu-ui-spice-coreUpgrade xenUpgrade qemu-block-curlUpgrade qemu-sgabiosUpgrade qemu-ppcUpgrade qemu-chardev-baumUpgrade qemu-ui-gtkUpgrade qemu-ui-cursesUpgrade qemu-x86Upgrade qemu-s390Upgrade xen-kmp-defaultUpgrade qemu-block-iscsiUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-usb-redirectUpgrade qemu-guest-agentUpgrade qemu-ui-openglUpgrade qemu-skibootUpgrade qemu-toolsUpgrade kvmUpgrade xen-kmp-paeUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-ossUpgrade xen-libsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-spiceUpgrade qemuUpgrade qemu-chardev-spiceUpgrade qemu-ipxeUpgrade xen-libs-32bitUpgrade qemu-armUpgrade qemu-ui-spice-appUpgrade xen-develUpgrade qemu-langUpgrade qemu-hw-display-qxlUpgrade qemu-seabiosUpgrade xen-doc-htmlUpgrade xen-toolsUpgrade qemu-block-rbdUpgrade qemu-block-ssh | Aug 26, 2016 | Jun 1, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-mips | Aug 6, 2016 | Jun 1, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub