Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU prior to 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service (guest crash) via a crafted SAI READ CAPACITY SCSI command. NOTE: this is only a vulnerability when root has manually modified certain permissions or ACLs.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
xen xen - |
||
qemu qemu 0.15.0 |
||
redhat enterprise linux 5 |
||
qemu qemu |
Vulmon