Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2016-5337

Опубликовано: 14 июн. 2016
Источник: debian

Описание

The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
qemufixed1:2.6+dfsg-2package
qemunot-affectedwheezypackage
qemu-kvmnot-affectedpackage

Примечания

  • Xen switched to qemu-system in 4.4.0-1

  • https://bugzilla.redhat.com/show_bug.cgi?id=1343909

  • https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg01969.html

  • http://git.qemu.org/?p=qemu.git;a=commit;h=844864fbae66935951529408831c2f22367a57b6

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 9 лет назад

The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.

redhat
больше 9 лет назад

The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.

CVSS3: 5.5
nvd
больше 9 лет назад

The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.

CVSS3: 5.5
github
больше 3 лет назад

The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.

suse-cvrf
больше 9 лет назад

Security update for kvm