NetSight
IP …
high8.8

CVE-2016-1568

Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance…

Impact

Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.

Affected products

VendorProductAffected versions
QemuQemu
through 2.5.1.1
RedhatOpenstack
Versions 6.0, 7.0, 5.0
RedhatVirtualization
Version 3.0
DebianDebian Linux
Versions 7.0, 8.0

Weakness classification

CWE-416

References