Files
poky/meta/recipes-devtools
Adrian Dudau 047e58b4ba qemu: Security fix CVE-2016-4952
affects qemu < 2.7.0

Quick Emulator(Qemu) built with the VMWARE PVSCSI paravirtual SCSI bus
emulation support is vulnerable to an OOB r/w access issue. It could
occur while processing SCSI commands 'PVSCSI_CMD_SETUP_RINGS' or
'PVSCSI_CMD_SETUP_MSG_RING'.

A privileged user inside guest could use this flaw to crash the Qemu
process resulting in DoS.

References:
----------
http://www.openwall.com/lists/oss-security/2016/05/23/1

(From OE-Core rev: 3d6b4fd6bc4338b139ebcaf51b67c56cc97ba2ed)

Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-05-18 13:14:20 +01:00
..
2016-01-15 11:54:50 +00:00
2016-01-20 17:07:11 +00:00
2016-02-28 11:33:04 +00:00
2016-02-19 01:01:24 +00:00
2016-07-27 08:33:37 +01:00
2015-12-22 16:08:51 +00:00
2016-02-11 12:27:49 +00:00
2015-12-18 12:18:19 +00:00
2015-12-16 12:12:17 +00:00
2015-05-30 22:26:12 +01:00
2015-12-22 16:08:51 +00:00
2016-01-25 12:44:13 +00:00
2016-02-28 11:33:05 +00:00
2016-10-06 08:51:30 +01:00
2016-07-27 08:33:37 +01:00
2017-05-18 13:14:20 +01:00
2016-03-28 15:55:48 +01:00
2016-11-08 23:47:13 +00:00
2015-09-03 12:43:14 +01:00
2016-01-20 17:07:14 +00:00
2015-12-16 12:12:15 +00:00
2016-03-09 16:58:13 +00:00
2015-06-11 23:59:15 +01:00