CVE ID:	CVE-2016-1568
Description:	Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.
Test IDs:	1.3.6.1.4.1.25623.1.0.703470   1.3.6.1.4.1.25623.1.0.703469
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1568 1034859 http://www.securitytracker.com/id/1034859 80191 http://www.securityfocus.com/bid/80191 DSA-3469 http://www.debian.org/security/2016/dsa-3469 DSA-3470 http://www.debian.org/security/2016/dsa-3470 DSA-3471 http://www.debian.org/security/2016/dsa-3471 GLSA-201602-01 https://security.gentoo.org/glsa/201602-01 RHSA-2016:0084 http://rhn.redhat.com/errata/RHSA-2016-0084.html RHSA-2016:0086 http://rhn.redhat.com/errata/RHSA-2016-0086.html RHSA-2016:0087 http://rhn.redhat.com/errata/RHSA-2016-0087.html RHSA-2016:0088 http://rhn.redhat.com/errata/RHSA-2016-0088.html [oss-security] 20160109 Qemu: ide: ahci use-after-free vulnerability in aio port commands http://www.openwall.com/lists/oss-security/2016/01/09/1 [oss-security] 20160109 Re: Qemu: ide: ahci use-after-free vulnerability in aio port commands http://www.openwall.com/lists/oss-security/2016/01/09/2 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=4ab0359a8ae182a7ac5c99609667273167703fab http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=4ab0359a8ae182a7ac5c99609667273167703fab