CVE-2016-5337 in QEMU

요약

\~에 의해 MITRE

The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• 예약하다: 2016. 06. 08.
• 공개: 2016. 06. 14.
• 모더레이션: 수락
• 항목: VDB-87920
• CPE: 준비됨
• CWE: CWE-200 (확인됨)
• CVSS: 5.5 (NVD)
• EPSS: 0.00062
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Transportation, Finance, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-5337
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-5337
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-5337/