CVE-2017-5856

Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of…

published March 16, 2017

CVSS
—
EPSS
0%
Percentile
32.3
In the wild
Unconfirmed
What it is

Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption) via MegaRAID Firmware Interface (MFI) commands with the sglist size set to a value over 2 Gb.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00393 · 32.3th percentile
Published
2017-03-16T15:00Z
EPSS history
Timeline
  • 16 MAR 15:00Z
    Memory leak in the megasas_handle_dcmd function in hw/scsi/megasas.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of…
    cvelistv5