Lucene search
PRIOn knowledge basePRION:CVE-2016-2391HistoryJun 16, 2016 - 6:59 p.m.
Null pointer dereference
2016-06-1618:59:00
PRIOn knowledge base
www.prio-n.com
5
The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ubuntu_linux | eq | 16.04 | |
| ubuntu_linux | eq | 15.10 | |
| ubuntu_linux | eq | 12.04 | |
| ubuntu_linux | eq | 14.04 | |
| debian_linux | eq | 8.0 | |
| qemu | le | 2.5.1.1 |
References
git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=fa1298c2d623522eda7b4f1f721fcb935abb7360
www.openwall.com/lists/oss-security/2016/02/16/2
www.securityfocus.com/bid/83263
www.ubuntu.com/usn/USN-2974-1
bugzilla.redhat.com/show_bug.cgi?id=1304794
lists.debian.org/debian-lts-announce/2018/11/msg00038.html
lists.gnu.org/archive/html/qemu-devel/2016-02/msg03374.html
Related
ubuntucve
ubuntucve
CVE-2016-2391
2016-02-17 00:00:00
cvelist
cvelist
CVE-2016-2391
2016-06-16 18:00:00
cve
cve
CVE-2016-2391
2016-06-16 18:59:03
nvd
nvd
CVE-2016-2391
2016-06-16 18:59:03
debiancve
debiancve
CVE-2016-2391
2016-06-16 18:59:03
openvas
openvas
Fedora Update for qemu FEDORA-2016-a3298e39f7
2016-06-08 00:00:00
Fedora Update for qemu FEDORA-2016-f2b1f07256
2016-06-08 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:1445-1)
2021-06-09 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: qemu-2.3.1-14.fc22
2016-05-20 23:53:50
[SECURITY] Fedora 23 Update: qemu-2.4.1-9.fc23
2016-05-15 05:33:39
[SECURITY] Fedora 22 Update: xen-4.5.2-9.fc22
2016-03-19 21:28:58
nessus
nessus
Fedora 22 : 2:qemu (2016-a3298e39f7)
2016-07-14 00:00:00
Fedora 23 : 2:qemu (2016-f2b1f07256)
2016-07-14 00:00:00
SUSE SLES10 Security Update : Xen (SUSE-SU-2016:1445-1)
2016-06-17 00:00:00
suse
suse
Security update for Xen (important)
2016-05-30 19:08:35
Security update for qemu (important)
2016-10-21 19:08:51
Security update for qemu (important)
2016-10-26 14:11:23
ubuntu
ubuntu
QEMU vulnerabilities
2016-05-12 00:00:00
mageia
mageia
Updated qemu packages fix security vulnerabilities
2016-05-18 23:14:22
ibm
ibm
Security Bulletin: Multiple vulnerabilities in qemu affect PowerKVM
2018-06-18 01:33:29
Security Bulletin: Vulnerabilities in Qemu affect PowerKVM
2018-06-18 01:35:35
osv
osv
qemu - security update
2018-11-29 00:00:00
debian
debian
[SECURITY] [DLA 1599-1] qemu security update
2018-11-30 14:28:32