CVE

Id
95396  
CVE No.
CVE-2016-8576  
Status
Candidate  
Description
The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit the number of link Transfer Request Blocks (TRB) to process.  
Phase
Assigned (20161010)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
798378 95396 CVE-2016-8576 MLIST:[oss-security] 20161010 CVE request Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch  View
798379 95396 CVE-2016-8576 URL:http://www.openwall.com/lists/oss-security/2016/10/10/6  View
798380 95396 CVE-2016-8576 MLIST:[oss-security] 20161010 Re: CVE request Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch  View
798381 95396 CVE-2016-8576 URL:http://www.openwall.com/lists/oss-security/2016/10/10/12  View
798382 95396 CVE-2016-8576 MLIST:[qemu-devel] 20161007 Re: [PATCH] usb: xHCI: add check to limit command TRB processing  View
798383 95396 CVE-2016-8576 URL:https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg01265.html  View
798384 95396 CVE-2016-8576 CONFIRM:http://git.qemu.org/?p=qemu.git;a=commit;h=05f43d44e4bc26611ce25fd7d726e483f73363ce  View
798385 95396 CVE-2016-8576 SUSE:openSUSE-SU-2016:3237  View
798386 95396 CVE-2016-8576 URL:http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html  View
798387 95396 CVE-2016-8576 BID:93469  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4902 JVNDB-2016-005675 Bitcoin Knots のデバッグコンソールにおける重要な情報を格納される脆弱性 Bitcoin Knots のデバッグコンソールには、秘密鍵およびウォレットのパスフレーズを含む重要な情報を永続的なコマンドの履歴内に格納される脆弱性が存在します。 CVE-2016-8889 95396 2.1 6.2 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005675.html  View