Qemu emulator built to use 'address_space_translate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pci_dma_read/write calls. Affects Qemu versions >= 1.6.0 & <= 2.3.1. A privileged user inside guest could use this flaw to crash the guest instance resulting in DoS. Upstream patches: ----------------- -> http://git.qemu.org/?p=qemu.git;a=commit;h=c3c1bb99d1c11978d9ce94d1bd -> http://git.qemu.org/?p=qemu.git;a=commit;h=e4a511f8cc6f4a46d409fb5c9f -> http://git.qemu.org/?p=qemu.git;a=commit;h=965eb2fcdfe919ecced6c34803 -> http://git.qemu.org/?p=qemu.git;a=commit;h=b242e0e0e2969c044a318e56f7 [*] https://lists.gnu.org/archive/html/qemu-stable/2016-01/msg00060.html Reference: ---------- -> http://www.openwall.com/lists/oss-security/2016/03/01/1
Statement: (none)
Acknowledgements: Red Hat would like to thank Donghai Zdh of Alibaba Inc. for reporting this issue.
Created xen tracking bugs for this issue: Affects: fedora-all [bug 1313273]
xen-4.5.2-9.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report.
xen-4.5.2-9.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report.
This issue has been addressed in the following products: Red Hat OpenStack Platform 9.0 (Mitaka) Via RHSA-2016:2671 https://rhn.redhat.com/errata/RHSA-2016-2671.html
This issue has been addressed in the following products: Red Hat OpenStack Platform 8.0 (Liberty) Via RHSA-2016:2670 https://rhn.redhat.com/errata/RHSA-2016-2670.html
This issue has been addressed in the following products: Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7 Via RHSA-2016:2704 https://rhn.redhat.com/errata/RHSA-2016-2704.html
This issue has been addressed in the following products: Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7 Via RHSA-2016:2706 https://rhn.redhat.com/errata/RHSA-2016-2706.html
This issue has been addressed in the following products: Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7 Via RHSA-2016:2705 https://rhn.redhat.com/errata/RHSA-2016-2705.html