The vulnerability of the QEMU hardware emulation software, which allows a hacker to trigger a service failure

The vulnerability of the megasasctrlgetinfo function in the QEMU hardware emulation driver is caused by a buffer overflow on the stack. Exploiting this vulnerability allows an attacker, operating locally, to trigger a service failure using a SCSI controller that executes the CTRLGETINFO command...

DEBIAN-CVE-2016-5337

The megasasctrlgetinfo function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information...

CVE-2016-5337

The megasasctrlgetinfo function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information...