NVD

Id
22246  
Name
CVE-2016-8909  
Description
The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via an entry with the same value for buffer length and pointer position.  
Reject
 
CVSS Version
2  
CVSS Score
1.9  
Severity
Low  
CVSS Base Score
1.9  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2016-11-04  
Modified Date
2017-01-06  
Seq
2016-8909  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
118462 22246 CVE-2016-8909 openSUSE-SU-2016:3237  View
118463 22246 CVE-2016-8909 [oss-security] 20161024 CVE request Qemu: audio: intel-hda: infinite loop in processing dma buffer stream  View
118464 22246 CVE-2016-8909 [oss-security] 20161024 Re: CVE request Qemu: audio: intel-hda: infinite loop in processing dma buffer stream  View
118465 22246 CVE-2016-8909 93842  View
118466 22246 CVE-2016-8909 [qemu-devel] 20161020 [PATCH] audio: intel-hda: check stream entry count during transfer  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
4982 JVNDB-2016-005755 QEMU の hw/audio/intel-hda.c の intel_hda_xfer 関数におけるサービス運用妨害 (DoS) の脆弱性 QEMU (別名 Quick Emulator) の hw/audio/intel-hda.c の intel_hda_xfer 関数には、サービス運用妨害 (無限ループおよび CPU 資源の消費) 状態にされる脆弱性が存在します。 CVE-2016-8909 95416 CVE-2016-8909 22246 1.9 6 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005755.html 2016-10-20 2016-11-08 View