NVD

Id
20401  
Name
CVE-2016-4964  
Description
The mptsas_fetch_requests function in hw/scsi/mptsas.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop, and CPU consumption or QEMU process crash) via vectors involving s->state.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-19  
Published
2016-12-09  
Modified Date
2016-12-12  
Seq
2016-4964  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
111516 20401 CVE-2016-4964 http://git.qemu.org/?p=qemu.git;a=commit;h=06630554ccbdd25780aa03c3548aaff1eb56dffd  View
111517 20401 CVE-2016-4964 [oss-security] 20160524 CVE Request: Qemu: scsi: mptsas infinite loop in mptsas_fetch_requests  View
111518 20401 CVE-2016-4964 [oss-security] 20160524 Re: CVE Request: Qemu: scsi: mptsas infinite loop in mptsas_fetch_requests  View
111519 20401 CVE-2016-4964 [qemu-devel] 20160524 [PATCH] scsi: mptsas: infinite loop while fetching requests  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5363 JVNDB-2016-006136 QEMU の hw/scsi/mptsas.c の mptsas_fetch_requests 関数におけるサービス運用妨害 (DoS) の脆弱性 QEMU (別名 Quick Emulator) の hw/scsi/mptsas.c の mptsas_fetch_requests 関数には、サービス運用妨害 (無限ループによる CPU 資源の消費または QEMU プロセスクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-4964 91470 CVE-2016-4964 20401 4.9 6 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006136.html 2016-05-24 2016-12-13 View