CVE-2016-5337 in QEMU

Sumário

de MITRE

The megasas_ctrl_get_info function in hw/scsi/megasas.c in QEMU allows local guest OS administrators to obtain sensitive host memory information via vectors related to reading device control information.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 08/06/2016
• Divulgação: 14/06/2016
• Moderação: aceite
• Entrada: VDB-87920
• CPE: pronto
• CWE: CWE-200 (confirmado)
• CVSS: 5.5 (NVD)
• EPSS: 0.00062
• KEV: não
• Atividades: muito baixo
• Sector: Insurance, Finance, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-5337
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-5337
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-5337/