CVE ID:	CVE-2015-8743
Description:	QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing 'ioport' r/w operations. A privileged (CAP_SYS_RAWIO) user/process could use this flaw to leak or corrupt QEMU memory bytes.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2016.1445.1   1.3.6.1.4.1.25623.1.0.703471   1.3.6.1.4.1.25623.1.0.703470   1.3.6.1.4.1.25623.1.0.703469
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-8743 1034574 http://www.securitytracker.com/id/1034574 79820 http://www.securityfocus.com/bid/79820 DSA-3469 http://www.debian.org/security/2016/dsa-3469 DSA-3470 http://www.debian.org/security/2016/dsa-3470 DSA-3471 http://www.debian.org/security/2016/dsa-3471 GLSA-201602-01 https://security.gentoo.org/glsa/201602-01 [oss-security] 20160104 CVE request Qemu: net: ne2000: OOB r/w in ioport operations http://www.openwall.com/lists/oss-security/2016/01/04/1 [oss-security] 20160104 Re: CVE request Qemu: net: ne2000: OOB r/w in ioport operations http://www.openwall.com/lists/oss-security/2016/01/04/2 [qemu-devel] 20160104 Re: [PATCH v3] net: ne2000: fix bounds check in ioport operations https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg00050.html https://bugzilla.redhat.com/show_bug.cgi?id=1264929 https://bugzilla.redhat.com/show_bug.cgi?id=1264929