CVE ID:	CVE-2013-4344
Description:	Buffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has more than 256 attached devices, allows local users to gain privileges via a small transfer buffer in a REPORT LUNS command.
Test IDs:	1.3.6.1.4.1.25623.1.0.702933   1.3.6.1.4.1.25623.1.0.850829   1.3.6.1.4.1.25623.1.1.10.2013.0341   1.3.6.1.4.1.25623.1.1.4.2014.0623.1   1.3.6.1.4.1.25623.1.0.866981   1.3.6.1.4.1.25623.1.0.123533   1.3.6.1.4.1.25623.1.0.702932   1.3.6.1.4.1.25623.1.0.871073   1.3.6.1.4.1.25623.1.1.4.2014.1318.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4344 62773 http://www.securityfocus.com/bid/62773 98028 http://osvdb.org/98028 RHSA-2013:1553 http://rhn.redhat.com/errata/RHSA-2013-1553.html RHSA-2013:1754 http://rhn.redhat.com/errata/RHSA-2013-1754.html USN-2092-1 http://www.ubuntu.com/usn/USN-2092-1 [oss-security] 20131002 Xen Security Advisory 65 (CVE-2013-4344) - qemu SCSI REPORT LUNS buffer overflow http://www.openwall.com/lists/oss-security/2013/10/02/2 [qemu-devel] 20131009 [ANNOUNCE] QEMU 1.6.1 Stable released http://article.gmane.org/gmane.comp.emulators.qemu/237191 openSUSE-SU-2014:1279 http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html openSUSE-SU-2014:1281 http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html