Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-2198

Опубликовано: 29 дек. 2016
Источник: nvd
CVSS3: 5.5
CVSS2: 2.1
EPSS Низкий

Описание

QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
Версия до 2.5.1.1 (включая)
cpe:2.3:a:qemu:qemu:2.6.0:rc0:*:*:*:*:*:*
cpe:2.3:a:qemu:qemu:2.6.0:rc1:*:*:*:*:*:*
cpe:2.3:a:qemu:qemu:2.6.0:rc2:*:*:*:*:*:*
cpe:2.3:a:qemu:qemu:2.6.0:rc3:*:*:*:*:*:*
cpe:2.3:a:qemu:qemu:2.6.0:rc4:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 29%
0.00104
Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 9 лет назад

QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.

redhat
около 10 лет назад

QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.

CVSS3: 5.5
debian
около 9 лет назад

QEMU (aka Quick Emulator) built with the USB EHCI emulation support is ...

CVSS3: 5.5
github
больше 3 лет назад

QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.

suse-cvrf
почти 10 лет назад

Security update for xen

EPSS

Процентиль: 29%
0.00104
Низкий

5.5 Medium

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-476