CVE-2016-5105

The megasasdcmdcfgread function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, uses an uninitialized variable, which allows local guest administrators to read host memory via vectors involving a MegaRAID Firmware Interface MFI command...

CVE-2016-5105

CVE-2016-5105 affects QEMU when MegaRAID SAS 8708EM2 HBA emulation is enabled. The megasas_dcmd_cfg_read path uses an uninitialized variable, enabling a local guest administrator to read host memory via MFI command vectors. Files in connected docs (IBM PowerKVM bulletin and SUSE/OpenSUSE advisori...

CVE-2016-5106

The megasasdcmdsetproperties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of service out-of-bounds write access via vectors involving a MegaRAID Firmware Interface MFI command...

CVE-2016-5106: Out-of-bounds Write

The megasasdcmdsetproperties function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest administrators to cause a denial of service out-of-bounds write access via vectors involving a MegaRAID Firmware Interface MFI command...

PT-2016-2678

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to the megasas dcmd set properties function in the hw/scsi/megasas.c file of QEMU, specifically when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support. This...