NVD

Id
21839  
Name
CVE-2016-7422  
Description
The virtqueue_map_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via a large I/O descriptor buffer length value.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-12-09  
Modified Date
2017-01-06  
Seq
2016-7422  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
117109 21839 CVE-2016-7422 http://git.qemu.org/?p=qemu.git;a=commit;h=973e7170dddefb491a48df5cba33b2ae151013a0  View
117110 21839 CVE-2016-7422 openSUSE-SU-2016:3237  View
117111 21839 CVE-2016-7422 [oss-security] 20160916 Re: CVE request Qemu: virtio: null pointer dereference in virtqueu_map_desc  View
117112 21839 CVE-2016-7422 [oss-security] 20160916 CVE request Qemu: virtio: null pointer dereference in virtqueu_map_desc  View
117113 21839 CVE-2016-7422 92996  View
117114 21839 CVE-2016-7422 [qemu-devel] 20160915 [PATCH] virtio: add check for descriptor"s mapped address  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5376 JVNDB-2016-006149 QEMU の hw/virtio/virtio.c の virtqueue_map_desc 関数におけるサービス運用妨害 (DoS) の脆弱性 QEMU (別名 Quick Emulator) の hw/virtio/virtio.c の virtqueue_map_desc 関数には、サービス運用妨害 (NULL ポインタデリファレンスおよび QEMU プロセスクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-7422 93929 CVE-2016-7422 21839 2.1 6 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006149.html 2016-09-15 2016-12-13 View