| Summary: |
<app-emulation/qemu-2.5.0-r2: hmp: stack based OOB write in hmp_sendkey routine (CVE-2015-8619) |
| Product: |
Gentoo Security
|
Reporter: |
Agostino Sarubbo <ago> |
| Component: |
Vulnerabilities | Assignee: |
Gentoo Security <security> |
| Status: |
RESOLVED
FIXED
|
|
|
| Severity: |
minor
|
CC: |
qemu+disabled
|
| Priority: |
Normal
|
|
|
| Version: |
unspecified | |
|
| Hardware: |
All | |
|
| OS: |
Linux | |
|
| URL: |
https://bugzilla.redhat.com/show_bug.cgi?id=1283926
|
| Whiteboard: |
B3 [glsa cve] |
|
Package list:
|
|
Runtime testing required:
|
---
|
|---|
| Bug Depends on: |
578044
|
|
|
| Bug Blocks: |
|
|
|
From ${URL} : Qemu emulator built with the Human Monitor Interface(HMP) support is vulnerable to an OOB write issue. It occurs while processing 'sendkey' command in hmp_sendkey routine, if the command argument is longer than the 'keyname_buf' buffer size. A user/process could use this flaw to crash the Qemu process instance resulting in DoS. Upstream fix: ------------- -> https://lists.gnu.org/archive/html/qemu-devel/2015-12/msg02930.html Reference: ---------- -> http://www.openwall.com/lists/oss-security/2015/12/23/1 @maintainer(s): after the bump, in case we need to stabilize the package, please let us know if it is ready for the stabilization or not.