CVE-2016-5338
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
14/06/2016
Last modified:
12/04/2025
Description
The (1) esp_reg_read and (2) esp_reg_write functions in hw/scsi/esp.c in QEMU allow local guest OS administrators to cause a denial of service (QEMU process crash) or execute arbitrary code on the QEMU host via vectors related to the information transfer buffer.
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH
Base Score 2.0
4.60
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:* | 2.6.2 (including) | |
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* | ||
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* | ||
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* | ||
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://git.qemu.org/?p=qemu.git%3Ba%3Dcommit%3Bh%3Dff589551c8e8e9e95e211b9d8daafb4ed39f1aec
- http://www.openwall.com/lists/oss-security/2016/06/07/3
- http://www.openwall.com/lists/oss-security/2016/06/08/14
- http://www.securityfocus.com/bid/91079
- http://www.ubuntu.com/usn/USN-3047-1
- http://www.ubuntu.com/usn/USN-3047-2
- https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
- https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg01507.html
- https://security.gentoo.org/glsa/201609-01
- http://git.qemu.org/?p=qemu.git%3Ba%3Dcommit%3Bh%3Dff589551c8e8e9e95e211b9d8daafb4ed39f1aec
- http://www.openwall.com/lists/oss-security/2016/06/07/3
- http://www.openwall.com/lists/oss-security/2016/06/08/14
- http://www.securityfocus.com/bid/91079
- http://www.ubuntu.com/usn/USN-3047-1
- http://www.ubuntu.com/usn/USN-3047-2
- https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
- https://lists.gnu.org/archive/html/qemu-devel/2016-06/msg01507.html
- https://security.gentoo.org/glsa/201609-01