CVE-2016-2538 in Fabrice Bellard QEMU
요약 (영어)
Multiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service (QEMU process crash) or obtain sensitive host memory information via a remote NDIS control message packet that is mishandled in the (1) rndis_query_response, (2) rndis_set_response, or (3) usb_net_handle_dataout function.
예약하다
2016. 02. 23.
공개
2016. 06. 16.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 81088 | Fabrice Bellard QEMU NDIS Control Message 서비스 거부 | 189 | 입증되지 않음 | 공식 수정 | CVE-2016-2538 |