Back to search
CVE-2016-5126
Published: Jun 1, 2016
Modified: Aug 6, 2024
PUBLISHED
Description
Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
RHSA-2016:1756
vendor-advisory
x_refsource_REDHAT
USN-3047-1
vendor-advisory
x_refsource_UBUNTU
RHSA-2016:1655
vendor-advisory
x_refsource_REDHAT
[oss-security] 20160530 CVE Request Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl
mailing-list
x_refsource_MLIST
RHSA-2016:1763
vendor-advisory
x_refsource_REDHAT
90948
vdb-entry
x_refsource_BID
RHSA-2016:1653
vendor-advisory
x_refsource_REDHAT
RHSA-2016:1607
vendor-advisory
x_refsource_REDHAT
RHSA-2016:1654
vendor-advisory
x_refsource_REDHAT
GLSA-201609-01
vendor-advisory
x_refsource_GENTOO
USN-3047-2
vendor-advisory
x_refsource_UBUNTU
RHSA-2016:1606
vendor-advisory
x_refsource_REDHAT
[oss-security] 20160530 Re: CVE Request Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl
mailing-list
x_refsource_MLIST
[qemu-block] 20160524 [Qemu-block] [PATCH] block/iscsi: avoid potential overflow of acb->task->cdb
mailing-list
x_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=1340924
x_refsource_CONFIRM
[debian-lts-announce] 20190920 [SECURITY] [DLA 1927-1] qemu security update
mailing-list
x_refsource_MLIST
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now