CVE-2016-5126: Buffer Overflow
Heap-based buffer overflow in the iscsiaioioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.
Other sources
Quick Emulator(Qemu) built with the Block driver for iSCSI images support (virtio-blk) is vulnerable to a heap buffer overflow flaw. It could occur while processing iSCSI asynchronous I/O ioctl(2) calls.
A user inside guest could use this flaw to crash the Qemu process resulting in DoS OR potentially leverage it to execute arbitrary code with privileges of the Qemu process on the host.
Upstream patch: --------------- -> https://lists.gnu.org/archive/html/qemu-block/2016-05/msg00779.html
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2016/05/30/6
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5126?
The severity of CVE-2016-5126 is classified as critical due to its potential to cause denial of service and possible arbitrary code execution.
How do I fix CVE-2016-5126?
To fix CVE-2016-5126, you should upgrade QEMU to version 2.6.3 or later where the vulnerability has been patched.
What systems are affected by CVE-2016-5126?
CVE-2016-5126 affects various versions of QEMU and multiple Linux distributions including Ubuntu 12.04, 14.04, and 16.04, among others.
What type of vulnerability is CVE-2016-5126?
CVE-2016-5126 is a heap-based buffer overflow vulnerability found in the iscsi_aio_ioctl function of QEMU.
What can be done if I cannot upgrade my system to patch CVE-2016-5126?
If you cannot upgrade, consider restricting access to the QEMU instance and applying network security measures to minimize exposure.