Lucene search

CVE-2016-2538

🗓️ 16 Jun 2016 18:06:59Reported by [email protected]Type

Multiple integer overflows in USB Net device emulator in QEMU before 2.5.1 may cause denial of service or sensitive host memory exposure via mishandled NDIS control message packets

Reporter	Title	Published	Views	Family All 78
Cvelist	CVE-2016-2538	16 Jun 201618:00	–	cvelist
Prion	Integer overflow	16 Jun 201618:59	–	prion
CVE	CVE-2016-2538	16 Jun 201618:59	–	cve
UbuntuCve	CVE-2016-2538	23 Feb 201600:00	–	ubuntucve
Debian CVE	CVE-2016-2538	16 Jun 201618:59	–	debiancve
Tenable Nessus	Fedora 24 : qemu-2.5.0-10.fc24 (2016-1b264ab4a4)	28 Mar 201600:00	–	nessus
Tenable Nessus	Fedora 23 : qemu-2.4.1-8.fc23 (2016-372bb57df0)	24 Mar 201600:00	–	nessus
Tenable Nessus	Fedora 22 : qemu-2.3.1-13.fc22 (2016-bfaf6a133b)	13 Apr 201600:00	–	nessus
Tenable Nessus	GLSA-201604-01 : QEMU: Multiple vulnerabilities	5 Apr 201600:00	–	nessus
Tenable Nessus	Ubuntu 14.04 LTS / 16.04 LTS : QEMU vulnerabilities (USN-2974-1)	13 May 201600:00	–	nessus

Nvd

Node

qemu qemuRange≤2.5.0

Source	Link
lists	www.lists.nongnu.org/archive/html/qemu-stable/2016-03/msg00064.html
ubuntu	www.ubuntu.com/usn/USN-2974-1
security	www.security.gentoo.org/glsa/201604-01
git	www.git.qemu.org/
securityfocus	www.securityfocus.com/bid/83336
lists	www.lists.debian.org/debian-lts-announce/2018/11/msg00038.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.gnu.org/archive/html/qemu-devel/2016-02/msg03658.html
openwall	www.openwall.com/lists/oss-security/2016/02/22/3

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Jun 2016 18:59Current

7.5High risk

Vulners AI Score7.5

CVSS23.6

CVSS37.1

EPSS0.001

CWE-189