Lucene search

CVE-2016-2392

🗓️ 16 Jun 2016 18:00:00Reported by redhatType

The USB Net device emulator in QEMU before 2.5.1 does not properly validate configuration descriptor objects, allowing denial of service via remote NDIS control message packet

Reporter	Title	Published	Views	Family All 70
Debian CVE	CVE-2016-2392	16 Jun 201618:59	–	debiancve
NVD	CVE-2016-2392	16 Jun 201618:59	–	nvd
Prion	Null pointer dereference	16 Jun 201618:59	–	prion
UbuntuCve	CVE-2016-2392	17 Feb 201600:00	–	ubuntucve
CVE	CVE-2016-2392	16 Jun 201618:59	–	cve
Fedora	[SECURITY] Fedora 24 Update: qemu-2.5.0-10.fc24	27 Mar 201600:30	–	fedora
Fedora	[SECURITY] Fedora 23 Update: qemu-2.4.1-8.fc23	23 Mar 201622:28	–	fedora
Fedora	[SECURITY] Fedora 22 Update: qemu-2.3.1-13.fc22	8 Apr 201620:27	–	fedora
Fedora	[SECURITY] Fedora 23 Update: xen-4.5.2-9.fc23	20 Mar 201602:32	–	fedora
Fedora	[SECURITY] Fedora 22 Update: xen-4.5.2-9.fc22	19 Mar 201621:28	–	fedora

Source	Link
lists	www.lists.nongnu.org/archive/html/qemu-stable/2016-03/msg00064.html
lists	www.lists.gnu.org/archive/html/qemu-devel/2016-02/msg02553.html
lists	www.lists.debian.org/debian-lts-announce/2018/11/msg00038.html
git	www.git.qemu.org/
openwall	www.openwall.com/lists/oss-security/2016/02/16/7
ubuntu	www.ubuntu.com/usn/USN-2974-1
securityfocus	www.securityfocus.com/bid/83274
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
security	www.security.gentoo.org/glsa/201604-01

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Jun 2016 18:00Current

7High risk

Vulners AI Score7

EPSS0.001