CVE-2016-2538 in QEMU
摘要 (英语)
Multiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service (QEMU process crash) or obtain sensitive host memory information via a remote NDIS control message packet that is mishandled in the (1) rndis_query_response, (2) rndis_set_response, or (3) usb_net_handle_dataout function.
Once again VulDB remains the best source for vulnerability data.
预定
2016-02-23
披露
2016-06-16
状态
已确认
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 81088 | Fabrice Bellard QEMU NDIS Control Message 拒绝服务 | 189 | 未经证实 | 官方修复 | CVE-2016-2538 |