QEMU megasas_ctrl_get_info Information Leakage Vulnerability (CVE-2016-5337)

QEMU megasas_ctrl_get_info Information Leakage Vulnerability (CVE-2016-5337)
QEMU megasas_ctrl_get_info Information Leakage Vulnerability (CVE-2016-5337)

Release date:
Updated on:

Affected Systems:

QEMU

Description:

CVE (CAN) ID: CVE-2016-5337

QEMU is an open source simulator software.

The QEMU hw/scsi/megasas. c/megasas_ctrl_get_info function has a security vulnerability. The local client system administrator can exploit this vulnerability to obtain sensitive host memory information.

<* Source: Li Qiang

*>

Suggestion:

Vendor patch:

QEMU
----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://git.qemu.org /? P = qemu. git; a = commit; h = 844864fbae66935951529408831c2f221_a57b6

Use KVM + Qemu to build a virtual machine in Ubuntu

Linux getting started Tutorial: QEMU for Virtual Machine experience

Ubuntu 12.04 cannot find the Qemu command

Install QEMU + efi bios on Arch Linux

QEMU translation framework and debugging tools

QEMU code analysis: BIOS loading process

QEMU details: click here
QEMU: click here

This article permanently updates the link address: