CVE-2016-4441 in QEMUالمعلومات

الملخص

بحسب MITRE

The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

حجز

02/05/2016

إفشاء

20/05/2016

الاعتدال

تمت الموافقة

إدخال

VDB-87560

EPSS

0.00383

KEV

لا

النشاطات

منخفض جدًا

المصادر

Interested in the pricing of exploits?

See the underground prices here!