FreeBSD : qemu -- denial of service vulnerability in MSI-X support (3fb06284-b1b7-11e5-9728-002590263bf5)
Low Nessus Plugin ID 87690
Synopsis
The remote FreeBSD host is missing one or more security-related updates.
Description
Prasad J Pandit, Red Hat Product Security Team, reports :
Qemu emulator built with the PCI MSI-X support is vulnerable to null pointer dereference issue. It occurs when the controller attempts to write to the pending bit array(PBA) memory region. Because the MSI-X MMIO support did not define the .write method.
A privileges used inside guest could use this flaw to crash the Qemu process resulting in DoS issue.
Solution
Update the affected packages.