Security Advisory

CVE-2017-5856

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-03-16 15:00:00

Last updated 2024-08-05 15:11:48

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) via MegaRAID Firmware Interface (MFI) commands with the sglist size set to a value over 2 Gb.

← Browse all CVEs View on cve.org ↗