CVE-2016-4441

The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.

Score
CVSS 3.1 6.0 Medium
Status
Modified - secalert@redhat.com
Published
2016-05-20
Last modified
2024-08-06
Weaknesses
CWE-119

Affected products

References

 
 
© AVABIS GmbH privacypolicy about