Description
The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://rhn.redhat.com/errata/RHSA-2016-2671.html ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=1300771 ↗
- http://rhn.redhat.com/errata/RHSA-2016-2706.html ↗
- http://www.openwall.com/lists/oss-security/2016/03/01/1 ↗
- http://www.openwall.com/lists/oss-security/2016/03/01/10 ↗
- http://rhn.redhat.com/errata/RHSA-2016-2705.html ↗
- http://rhn.redhat.com/errata/RHSA-2016-2670.html ↗
- http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b242e0e0e2969c044a318e56f7988bbd84de1f63 ↗
- http://rhn.redhat.com/errata/RHSA-2016-2704.html ↗