NVD

Id
18466  
Name
CVE-2016-2197  
Description
QEMU (aka Quick Emulator) built with an IDE AHCI emulation support is vulnerable to a null pointer dereference flaw. It occurs while unmapping the Frame Information Structure (FIS) and Command List Block (CLB) entries. A privileged user inside guest could use this flaw to crash the QEMU process instance resulting in DoS.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-12-29  
Modified Date
2016-12-30  
Seq
2016-2197  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
102743 18466 CVE-2016-2197 [qemu-devel] 20160129 CVE request Qemu: ide: ahci null pointer dereference when using FIS CLB engines  View
102744 18466 CVE-2016-2197 [qemu-devel] 20160130 Re: CVE request Qemu: ide: ahci null pointer dereference when using FIS CLB engines  View
102745 18466 CVE-2016-2197 82235  View
102746 18466 CVE-2016-2197 https://bugzilla.redhat.com/show_bug.cgi?id=1302057  View
102747 18466 CVE-2016-2197 [qemu-devel] 20160128 [PATCH v2] ide: ahci: add check before calling dma_memory_unmap  View

Related JVN