CVE-2016-2391

🗓️ 16 Jun 2016 18:03:59Reported by redhatType

The ohci_bus_start function in the USB OHCI emulation support in QEMU allows local guest OS administrators to cause a denial of service via vectors related to multiple eof_timers

Reporter	Title	Published	Views	Family All 71
Prion	Null pointer dereference	16 Jun 201618:59	–	prion
Debian CVE	CVE-2016-2391	16 Jun 201618:59	–	debiancve
UbuntuCve	CVE-2016-2391	17 Feb 201600:00	–	ubuntucve
Cvelist	CVE-2016-2391	16 Jun 201618:00	–	cvelist
NVD	CVE-2016-2391	16 Jun 201618:59	–	nvd
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2016-2391	4 Mar 202500:00	–	nessus
Tenable Nessus	Fedora 23 : 2:qemu (2016-f2b1f07256)	14 Jul 201600:00	–	nessus
Tenable Nessus	Fedora 22 : 2:qemu (2016-a3298e39f7)	14 Jul 201600:00	–	nessus
Tenable Nessus	SUSE SLES10 Security Update : Xen (SUSE-SU-2016:1445-1)	17 Jun 201600:00	–	nessus
Tenable Nessus	Ubuntu 14.04 LTS / 16.04 LTS : QEMU vulnerabilities (USN-2974-1)	13 May 201600:00	–	nessus

Nvd

Node

qemu qemuRange≤2.5.1.1

Node

canonical ubuntu_linuxMatch12.04esm

canonical ubuntu_linuxMatch14.04esm

canonical ubuntu_linuxMatch15.10

canonical ubuntu_linuxMatch16.04lts

Node

debian debian_linuxMatch8.0

Source	Link
lists	www.lists.debian.org/debian-lts-announce/2018/11/msg00038.html
openwall	www.openwall.com/lists/oss-security/2016/02/16/2
securityfocus	www.securityfocus.com/bid/83263
lists	www.lists.gnu.org/archive/html/qemu-devel/2016-02/msg03374.html
git	www.git.qemu.org/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
ubuntu	www.ubuntu.com/usn/USN-2974-1

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Jun 2016 18:59Current

6Medium risk

Vulners AI Score6

CVSS22.1

CVSS35

EPSS0.00104

CWE-476