NVD

Id
18467  
Name
CVE-2016-2198  
Description
QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-12-29  
Modified Date
2016-12-30  
Seq
2016-2198  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
102748 18467 CVE-2016-2198 [oss-security] 20160129 CVE request Qemu: usb: ehci null pointer dereference in ehci_caps_write  View
102749 18467 CVE-2016-2198 [oss-security] 20160130 Re: CVE request Qemu: usb: ehci null pointer dereference in ehci_caps_write  View
102750 18467 CVE-2016-2198 https://bugzilla.redhat.com/show_bug.cgi?id=1301643  View
102751 18467 CVE-2016-2198 [qemu-devel] 20160129 [PATCH] usb: ehci: add capability mmio write function  View

Related JVN