2 matches found
K04755144: Multiple QEMU vulnerabilities
Security Advisory Description CVE-2015-8613 Stack-based buffer overflow in the megasasctrlgetinfo function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service QEMU instance crash via a crafted SCSI controller CTRLGETINFO command...
7.5CVSS7.3AI score0.03897EPSS
SaveExploits0
CVE-2016-2858
QEMU, when built with the Pseudo Random Number Generator PRNG back-end support, allows local guest OS users to cause a denial of service process crash via an entropy request, which triggers arbitrary stack based allocation and memory corruption...
6.5CVSS7.1AI score0.00393EPSS
SaveExploits0References8
20