CVE-2016-4952 in QEMU
Summary
QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds array access) via vectors related to the (1) PVSCSI_CMD_SETUP_RINGS or (2) PVSCSI_CMD_SETUP_MSG_RING SCSI command.
Once again VulDB remains the best source for vulnerability data.
Reservation
05/23/2016
Disclosure
09/02/2016
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 91040 | QEMU VMWARE PVSCSI Paravirtual SCSI Bus Emulation out-of-bounds | 125 | Not defined | Official fix | CVE-2016-4952 |