Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
No PoCs found on GitHub currently.