CVE-2016-4964

Опубликовано: 10 дек. 2016

Источник: nvd

CVSS3: 6

CVSS2: 4.9

EPSS Низкий

Описание

The mptsas_fetch_requests function in hw/scsi/mptsas.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop, and CPU consumption or QEMU process crash) via vectors involving s->state.

Ссылки

http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=06630554ccbdd25780aa03c3548aaff1eb56dffd
http://www.openwall.com/lists/oss-security/2016/05/24/4
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/05/24/7
Mailing List
Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04027.html
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201609-01
Third Party Advisory
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=06630554ccbdd25780aa03c3548aaff1eb56dffd
http://www.openwall.com/lists/oss-security/2016/05/24/4
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/05/24/7
Mailing List
Third Party Advisory
https://lists.gnu.org/archive/html/qemu-devel/2016-05/msg04027.html
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201609-01
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Версия до 2.6.2 (включая)

EPSS

Процентиль: 19%

0.0006

Низкий

6 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2016-4964

CVSS3: 6

ubuntu

около 9 лет назад

CVE-2016-4964

redhat

больше 9 лет назад

CVE-2016-4964

CVSS3: 6

debian

около 9 лет назад

The mptsas_fetch_requests function in hw/scsi/mptsas.c in QEMU (aka Qu ...

GHSA-wr7c-c22q-3392

CVSS3: 6

github

больше 3 лет назад

EPSS

Процентиль: 19%

0.0006

Низкий

6 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

NVD-CWE-noinfo