CVE-2016-5403 in Xen

Sumário

de MITRE

The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservar: 10/06/2016
• Divulgação: 02/08/2016
• Moderação: aceite
• Entrada: VDB-90386
• CPE: pronto
• CWE: CWE-399 (confirmado)
• CVSS: 5.5 (NVD)
• EPSS: 0.00055
• KEV: não
• Atividades: muito baixo
• Sector: Hostingprovider, Finance, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-5403
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-5403
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-5403/