CVE-2016-5106

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description The issue is related to the megasas dcmd set properties function in the hw/scsi/megasas.c file of QEMU, specifically when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support. This allows local guest administrators to cause a denial of service due to out-of-bounds write access. The exploitation vectors involve a MegaRAID Firmware Interface (MFI) command.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.