Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-5126

Опубликовано: 01 июн. 2016
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.6
CVSS3: 7.8

Описание

Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.

РелизСтатусПримечание
devel

not-affected

1:2.6+dfsg-3ubuntu1
esm-infra-legacy/trusty

not-affected

2.0.0+dfsg-2ubuntu1.26
esm-infra/xenial

not-affected

1:2.5+dfsg-5ubuntu10.3
precise

DNE

trusty

released

2.0.0+dfsg-2ubuntu1.26
trusty/esm

not-affected

2.0.0+dfsg-2ubuntu1.26
upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

wily

ignored

end of life

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra-legacy/trusty

DNE

precise

not-affected

code not present
trusty

DNE

trusty/esm

DNE

upstream

needs-triage

vivid/stable-phone-overlay

DNE

vivid/ubuntu-core

DNE

wily

DNE

xenial

DNE

Показывать по

EPSS

Процентиль: 39%
0.0017
Низкий

4.6 Medium

CVSS2

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 5.4
redhat
больше 9 лет назад

Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.

CVSS3: 7.8
nvd
больше 9 лет назад

Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.

CVSS3: 7.8
debian
больше 9 лет назад

Heap-based buffer overflow in the iscsi_aio_ioctl function in block/is ...

CVSS3: 7.8
github
больше 3 лет назад

Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.

oracle-oval
около 9 лет назад

ELSA-2016-1606: qemu-kvm security update (MODERATE)

EPSS

Процентиль: 39%
0.0017
Низкий

4.6 Medium

CVSS2

7.8 High

CVSS3