CVE

Id
96742  
CVE No.
CVE-2016-9922  
Status
Candidate  
Description
The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving blit pitch values.  
Phase
Assigned (20161208)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
801557 96742 CVE-2016-9922 MLIST:[oss-security] 20161209 Re: CVE request Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy  View
801558 96742 CVE-2016-9922 URL:http://www.openwall.com/lists/oss-security/2016/12/09/1  View
801559 96742 CVE-2016-9922 MLIST:[qemu-devel] 20161205 [PULL 4/4] display: cirrus: check vga bits per pixel(bpp) value  View
801560 96742 CVE-2016-9922 URL:https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg00442.html  View
801561 96742 CVE-2016-9922 CONFIRM:http://git.qemu-project.org/?p=qemu.git;a=commit;h=4299b90e9ba9ce5ca9024572804ba751aa1a7e70  View
801562 96742 CVE-2016-9922 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1334398  View
801563 96742 CVE-2016-9922 BID:94803  View

Related JVN