CVE-2016-5337
- State
- Published
- Severity
- Not scored
- Published
- Jun 14, 2016
- Updated
- Aug 6, 2024
- Reserved
- Jun 8, 2016
Description
The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- USN-3047-1vendor-advisory
- http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=844864fbae66935951529408831c2f22367a57b6
- 91097vdb-entry
- GLSA-201609-01vendor-advisory
- USN-3047-2vendor-advisory
- [oss-security] 20160608 Re: CVE Request Qemu: scsi: megasas: information leakage in megasas_ctrl_get_infomailing-list
- [debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security updatemailing-list
- [qemu-devel] 20160607 [PULL 06/13] scsi: megasas: null terminate bios version buffermailing-list
- [oss-security] 20160608 CVE Request Qemu: scsi: megasas: information leakage in megasas_ctrl_get_infomailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.