PT-2016-5151 · Qemu+3 · Qemu+3

Zuozhi Fzz · Published 2016-02-17 · Updated 2024-06-15 · CVE-2016-2391

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description The issue allows local guest OS administrators to cause a denial of service, resulting in a NULL pointer dereference and QEMU process crash. This is related to the ohci bus start function in the USB OHCI emulation support.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2016-1565

ALT-PU-2016-1874

CVE-2016-2391

DLA-1599-1

MGASA-2016-0176

OPENSUSE-SU-2016_0914-1

OPENSUSE-SU-2016_2642-1

OPENSUSE-SU-2024:10196-1

SUSE-SU-2016:0873-1

SUSE-SU-2016:0955-1

SUSE-SU-2016:1154-1

SUSE-SU-2016:1318-1

SUSE-SU-2016:1745-1

SUSE-SU-2016:2589-1

SUSE-SU-2016:2628-1

SUSE-SU-2016:2781-1

SUSE-SU-2016_2589-1

USN-2974-1

Affected Products

Alt Linux

Qemu

Suse

Ubuntu

References · 441

• https://ubuntu.com/security/CVE-2016-2391 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-01031 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-17963 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8577 · Security Note
• https://ubuntu.com/security/CVE-2016-3710 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-2391 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1154-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:0955-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:2781-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2392 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DLA-1599-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4037 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7155 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4454 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5106 · Security Note