NetSight
IP …
high7.8

CVE-2016-5126

Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process cras…

Impact

Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.

Affected products

VendorProductAffected versions
QemuQemu
through 2.6.2
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04
OracleLinux
Version 7
DebianDebian Linux
Version 8.0
RedhatOpenstack
Versions 6.0, 7.0, 8, 9, 5.0
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Eus
Versions 7.2, 7.3, 7.4, 7.5, 7.6, 7.7
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Aus
Versions 7.2, 7.3, 7.4, 7.6, 7.7
RedhatEnterprise Linux Server Tus
Versions 7.2, 7.3, 7.6, 7.7
RedhatEnterprise Linux Workstation
Version 7.0
RedhatVirtualization
Version 3.0

Weakness classification

CWE-787

References