NVD

Id
18616  
Name
CVE-2016-2391  
Description
The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-06-16  
Modified Date
2016-11-28  
Seq
2016-2391  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
103211 18616 CVE-2016-2391 http://git.qemu.org/?p=qemu.git;a=commit;h=fa1298c2d623522eda7b4f1f721fcb935abb7360  View
103212 18616 CVE-2016-2391 [oss-security] 20160216 CVE request Qemu: usb: multiple eof_timers in ohci leads to null pointer dereference  View
103213 18616 CVE-2016-2391 83263  View
103214 18616 CVE-2016-2391 USN-2974-1  View
103215 18616 CVE-2016-2391 https://bugzilla.redhat.com/show_bug.cgi?id=1304794  View
103216 18616 CVE-2016-2391 [qemu-devel] 20160216 [Qemu-devel] [PATCH] usb: ohci avoid multiple eof timers  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2496 JVNDB-2016-003269 QEMU の USB OHCI エミュレーションサポートの ohci_bus_start 関数におけるサービス運用妨害 (DoS) の脆弱性 QEMU の USB OHCI エミュレーションサポート (hw/usb/hcd-ohci.c) の ohci_bus_start 関数には、サービス運用妨害 (NULL ポインタデリファレンスおよび QEMU プロセスクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-2391 88897 CVE-2016-2391 18616 2.1 5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003269.html 2016-02-16 2016-06-20 View