NVD

Id
18617  
Name
CVE-2016-2392  
Description
The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, which allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving a remote NDIS control message packet.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-06-16  
Modified Date
2016-11-28  
Seq
2016-2392  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
103217 18617 CVE-2016-2392 http://git.qemu.org/?p=qemu.git;a=commit;h=80eecda8e5d09c442c24307f340840a5b70ea3b9  View
103218 18617 CVE-2016-2392 [qemu-stable] 20160329 [Qemu-stable] [ANNOUNCE] QEMU 2.5.1 Stable released  View
103219 18617 CVE-2016-2392 [oss-security] 20160216 CVE request Qemu: usb: null pointer dereference in remote NDIS control message handling  View
103220 18617 CVE-2016-2392 83274  View
103221 18617 CVE-2016-2392 USN-2974-1  View
103222 18617 CVE-2016-2392 https://bugzilla.redhat.com/show_bug.cgi?id=1302299  View
103223 18617 CVE-2016-2392 [qemu-devel] 20160211 [Qemu-devel] [PATCH] usb: check USB configuration descriptor object  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2516 JVNDB-2016-003289 QEMU の USB Net デバイスエミュレータの is_rndis 関数におけるサービス運用妨害 (DoS) の脆弱性 QEMU の USB Net デバイスエミュレータ (hw/usb/dev-network.c) の is_rndis 関数は、USB 構成記述子オブジェクトを適切に検証しないため、サービス運用妨害 (NULL ポインタデリファレンスおよび QEMU プロセスクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-2392 88898 CVE-2016-2392 18617 2.1 6.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003289.html 2016-03-29 2016-06-21 View