Denial of Service Vulnerability in QEMU's Megasas_lookup_frame Function with MegaRAID SAS 8708EM2 HBA Emulation Support

Denial of Service Vulnerability in QEMU's Megasas_lookup_frame Function with MegaRAID SAS 8708EM2 HBA Emulation Support

CVE-2016-5107 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors.

Learn more about our Web Application Penetration Testing UK.