EUVD-2016-8319

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Memory leak in usb_xhci_exit function in QEMU can cause denial of service by unplugging USB devices

Reporter	Title	Published	Views	Family All 63
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Qemu affect PowerKVM	18 Jun 201801:35	–	ibm
CNVD	QEMU 'hw/usb/hcd-xhci.c' Information Disclosure Vulnerability	24 Sep 201600:00	–	cnvd
CVE	CVE-2016-7466	10 Dec 201600:00	–	cve
Cvelist	CVE-2016-7466	10 Dec 201600:00	–	cvelist
Debian CVE	CVE-2016-7466	10 Dec 201600:00	–	debiancve
Fedora	[SECURITY] Fedora 25 Update: qemu-2.7.0-4.fc25	18 Oct 201611:34	–	fedora
Fedora	[SECURITY] Fedora 24 Update: qemu-2.6.2-2.fc24	18 Oct 201615:55	–	fedora
Tenable Nessus	Fedora 25 : 2:qemu (2016-3d3218ec41)	15 Nov 201600:00	–	nessus
Tenable Nessus	Fedora 24 : 2:qemu (2016-a56fb613a8)	19 Oct 201600:00	–	nessus
Tenable Nessus	GLSA-201611-11 : QEMU: Multiple vulnerabilities	21 Nov 201600:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "ea28a8e6-efd3-3eba-be10-1d20ad46ce61",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "d4bfa871-8e05-36da-b544-2e044c2003b3",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2016-7466.html
access	www.access.redhat.com/errata/RHSA-2017:2408
access	www.access.redhat.com/errata/RHSA-2017:2392
ubuntu	www.ubuntu.com/security/CVE-2016-7466
openwall	www.openwall.com/lists/oss-security/2016/09/19/8
openwall	www.openwall.com/lists/oss-security/2016/09/20/3
security	www.security.gentoo.org/glsa/201611-11
securityfocus	www.securityfocus.com/bid/93029
lists	www.lists.opensuse.org/opensuse-updates/2016-12/msg00140.html
git	www.git.qemu.org/

07 Oct 2025 00:30Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16

CVSS 21.9

EPSS0.00094