PT-2016-6196 · Qemu Team+1 · Qemu+1

Li Qiang · Publicado 2016-12-10 · Atualizado 2024-06-15 · CVE-2016-4964

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions QEMU (aka Quick Emulator) (affected versions not specified)

Description The issue allows local guest OS administrators to cause a denial of service, potentially leading to an infinite loop, CPU consumption, or a QEMU process crash. This is achieved through vectors involving the s->state variable in the mptsas fetch requests function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

ALT-PU-2017-1043

CVE-2016-4964

OPENSUSE-SU-2024:10233-1

OPENSUSE-SU-2024:10285-1

Produtos afetados

Alt Linux

Qemu

Referências · 138

• https://bdu.fstec.ru/vul/2017-00076 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8909 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-4454 · Nota
• https://suse.com/security/cve/CVE-2013-4526 · Nota
• https://suse.com/security/cve/CVE-2013-4535 · Nota
• https://suse.com/security/cve/CVE-2013-4530 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9907 · Nota de Segurança
• https://suse.com/security/cve/CVE-2014-0182 · Nota
• https://suse.com/security/cve/CVE-2014-0145 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7995 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7116 · Nota de Segurança
• https://suse.com/security/cve/CVE-2012-3515 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9381 · Nota de Segurança
• https://packages.altlinux.org/ru/vuln/CVE-2016-4964 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5126 · Nota de Segurança