CVE-2016-4439

The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or potentially execute arbitrary code on the QEMU host via unspecified vectors.

Score
CVSS 3.1 6.7 Medium
Status
Modified - secalert@redhat.com
Published
2016-05-20
Last modified
2024-08-06
Weaknesses
CWE-119

Affected products

References

 
 
© AVABIS GmbH privacypolicy about