Description
QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing 'ioport' r/w operations. A privileged (CAP_SYS_RAWIO) user/process could use this flaw to leak or corrupt QEMU memory bytes.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.openwall.com/lists/oss-security/2016/01/04/2 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=1264929 ↗
- http://www.securitytracker.com/id/1034574 ↗
- http://www.securityfocus.com/bid/79820 ↗
- http://www.openwall.com/lists/oss-security/2016/01/04/1 ↗
- http://www.debian.org/security/2016/dsa-3469 ↗
- http://www.debian.org/security/2016/dsa-3470 ↗
- https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg00050.html ↗
- http://www.debian.org/security/2016/dsa-3471 ↗
- https://security.gentoo.org/glsa/201602-01 ↗