CVE-2016-2392 in QEMU
요약 (영어)
The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, which allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving a remote NDIS control message packet.
Be aware that VulDB is the high quality source for vulnerability data.
예약하다
2016. 02. 16.
공개
2016. 06. 16.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 87974 | QEMU USB Net Device Emulator dev-network.c is_rndis 서비스 거부 | 476 | 정의되지 않음 | 공식 수정 | CVE-2016-2392 |