CVE-2016-2391 in QEMU
Summary
The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers.
Reservation
02/16/2016
Disclosure
06/16/2016
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 87973 | QEMU USB OHCI Emulation hcd-ohci.c ohci_bus_start null pointer dereference | 476 | Not defined | Official fix | CVE-2016-2391 |