CVE ID:	CVE-2016-5126
Description:	Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.
Test IDs:	1.3.6.1.4.1.25623.1.0.891927
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-5126 90948 http://www.securityfocus.com/bid/90948 GLSA-201609-01 https://security.gentoo.org/glsa/201609-01 RHSA-2016:1606 http://rhn.redhat.com/errata/RHSA-2016-1606.html RHSA-2016:1607 http://rhn.redhat.com/errata/RHSA-2016-1607.html RHSA-2016:1653 http://rhn.redhat.com/errata/RHSA-2016-1653.html RHSA-2016:1654 http://rhn.redhat.com/errata/RHSA-2016-1654.html RHSA-2016:1655 http://rhn.redhat.com/errata/RHSA-2016-1655.html RHSA-2016:1756 http://rhn.redhat.com/errata/RHSA-2016-1756.html RHSA-2016:1763 http://rhn.redhat.com/errata/RHSA-2016-1763.html USN-3047-1 http://www.ubuntu.com/usn/USN-3047-1 USN-3047-2 http://www.ubuntu.com/usn/USN-3047-2 [debian-lts-announce] 20190920 [SECURITY] [DLA 1927-1] qemu security update https://lists.debian.org/debian-lts-announce/2019/09/msg00021.html [oss-security] 20160530 CVE Request Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl http://www.openwall.com/lists/oss-security/2016/05/30/6 [oss-security] 20160530 Re: CVE Request Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl http://www.openwall.com/lists/oss-security/2016/05/30/7 [qemu-block] 20160524 [Qemu-block] [PATCH] block/iscsi: avoid potential overflow of acb->task->cdb https://lists.gnu.org/archive/html/qemu-block/2016-05/msg00779.html http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=a6b3167fa0e825aebb5a7cd8b437b6d41584a196 http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=a6b3167fa0e825aebb5a7cd8b437b6d41584a196 http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html https://bugzilla.redhat.com/show_bug.cgi?id=1340924 https://bugzilla.redhat.com/show_bug.cgi?id=1340924