Wind River Support Network

HomeDefectsLIN7-5669
Fixed

LIN7-5669 : Security Advisory - qemu - CVE-2016-1568

Created: Feb 19, 2016    Updated: Sep 8, 2018
Resolved Date: Mar 1, 2016
Found In Version: 7.0
Fix Version: 7.0.0.14
Severity: Standard
Applicable for: Wind River Linux 7
Component/s: Userspace

Description

A use-after-free flaw was found in the way QEMU's IDE AHCI emulator processed certain AHCI Native Command Queuing (NCQ) AIO commands. A privileged guest user could use this flaw to crash the QEMU process instance or, potentially, execute arbitrary code on the host with privileges of the QEMU process.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1568

Other Downloads

CVEs

Live chat
Online
  • Linkedin
  • Facebook
  • Twitter
  • Youtube