CVE

Id
93653  
CVE No.
CVE-2016-6833  
Status
Candidate  
Description
Use-after-free vulnerability in the vmxnet3_io_bar0_write function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU instance crash) by leveraging failure to check if the device is active.  
Phase
Assigned (20160817)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
794226 93653 CVE-2016-6833 MLIST:[oss-security] 20160812 CVE request: Qemu net: vmxnet3: use after free while writing  View
794227 93653 CVE-2016-6833 URL:http://www.openwall.com/lists/oss-security/2016/08/12/1  View
794228 93653 CVE-2016-6833 MLIST:[oss-security] 20160817 Re: CVE request: Qemu net: vmxnet3: use after free while writing  View
794229 93653 CVE-2016-6833 URL:http://www.openwall.com/lists/oss-security/2016/08/18/3  View
794230 93653 CVE-2016-6833 MLIST:[qemu-devel] 20160809 [PULL 2/3] net: vmxnet3: check for device_active before write  View
794231 93653 CVE-2016-6833 URL:https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01602.html  View
794232 93653 CVE-2016-6833 CONFIRM:http://git.qemu.org/?p=qemu.git;a=commit;h=6c352ca9b4ee3e1e286ea9e8434bd8e69ac7d0d8  View
794233 93653 CVE-2016-6833 BID:93255  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5095 JVNDB-2016-005868 MoinMoin における "JavaScript インジェクション" 攻撃を実行される脆弱性 MoinMoin には、"JavaScript インジェクション" 攻撃を実行される脆弱性が存在します。 CVE-2016-7146 93653 4.3 6.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005868.html  View