Security Advisory

CVE-2015-5158

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-04-08 16:00:00

Last updated 2024-08-06 06:32:32

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

Stack-based buffer overflow in hw/scsi/scsi-bus.c in QEMU, when built with SCSI-device emulation support, allows guest OS users with CAP_SYS_RAWIO permissions to cause a denial of service (instance crash) via an invalid opcode in a SCSI command descriptor block.

← Browse all CVEs View on cve.org ↗