Lucene search

CVE-2016-2392

🗓️ 16 Jun 2016 18:04:59Reported by redhatType

The is_rndis function in the USB Net device emulator in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, leading to a denial of service

Reporter	Title	Published	Views	Family All 70
NVD	CVE-2016-2392	16 Jun 201618:59	–	nvd
Debian CVE	CVE-2016-2392	16 Jun 201618:59	–	debiancve
Cvelist	CVE-2016-2392	16 Jun 201618:00	–	cvelist
Prion	Null pointer dereference	16 Jun 201618:59	–	prion
UbuntuCve	CVE-2016-2392	17 Feb 201600:00	–	ubuntucve
Tenable Nessus	Fedora 24 : qemu-2.5.0-10.fc24 (2016-1b264ab4a4)	28 Mar 201600:00	–	nessus
Tenable Nessus	Fedora 22 : qemu-2.3.1-13.fc22 (2016-bfaf6a133b)	13 Apr 201600:00	–	nessus
Tenable Nessus	Fedora 23 : qemu-2.4.1-8.fc23 (2016-372bb57df0)	24 Mar 201600:00	–	nessus
Tenable Nessus	GLSA-201604-01 : QEMU: Multiple vulnerabilities	5 Apr 201600:00	–	nessus
Tenable Nessus	Ubuntu 14.04 LTS / 16.04 LTS : QEMU vulnerabilities (USN-2974-1)	13 May 201600:00	–	nessus

Nvd

Node

qemu qemuMatch2.5.0

Node

canonical ubuntu_linuxMatch12.04lts

canonical ubuntu_linuxMatch14.04lts

canonical ubuntu_linuxMatch15.10

canonical ubuntu_linuxMatch16.04lts

Source	Link
lists	www.lists.nongnu.org/archive/html/qemu-stable/2016-03/msg00064.html
lists	www.lists.gnu.org/archive/html/qemu-devel/2016-02/msg02553.html
lists	www.lists.debian.org/debian-lts-announce/2018/11/msg00038.html
git	www.git.qemu.org/
openwall	www.openwall.com/lists/oss-security/2016/02/16/7
ubuntu	www.ubuntu.com/usn/USN-2974-1
securityfocus	www.securityfocus.com/bid/83274
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
security	www.security.gentoo.org/glsa/201604-01

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Jun 2016 18:59Current

6.3Medium risk

Vulners AI Score6.3

CVSS22.1

CVSS36.5

EPSS0.001