vulnerability

Debian: CVE-2016-5337: qemu -- security update

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:N/C:P/I:N/A:N)

Published

Jun 14, 2016

Added

Feb 20, 2019

Modified

Mar 30, 2026

Description

The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.

Solution

debian-upgrade-qemu

References

CVE-2016-5337
https://attackerkb.com/topics/CVE-2016-5337
DEBIAN-DLA-1599-1
EUVD-EUVD-2016-6288
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-6288

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report