CVE-2016-5337 in QEMU

Resumen

por MITRE

The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 2016-06-08
• Divulgación: 2016-06-14
• Moderación: aceptado
• Artículo: VDB-87920
• CPE: listo
• CWE: CWE-200 (confirmado)
• CVSS: 5.5 (NVD)
• EPSS: 0.00062
• KEV: no
• Actividades: muy bajo
• Sector: Insurance, Industry, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-5337
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-5337
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-5337/