CVE-2016-9101 in QEMU

Riassunto

di MITRE

Memory leak in hw/net/eepro100.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by repeatedly unplugging an i8255x (PRO100) NIC device.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 28/10/2016
• Divulgazione: 09/12/2016
• Moderazione: accettato
• Voce: VDB-94013
• CPE: pronto
• CWE: CWE-399 (confermato)
• CVSS: 6.0 (NVD)
• EPSS: 0.00394
• KEV: no
• Attività: molto basso
• Settore: Lawfirm, Transportation, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-9101
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-9101
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-9101/