Lucene search

K
nvd[email protected]NVD:CVE-2016-9916
HistoryDec 29, 2016 - 10:59 p.m.

CVE-2016-9916

2016-12-2922:59:00
CWE-401
web.nvd.nist.gov
8
qemu
9pfs proxy
memory leak
denial of service

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

AI Score

6

Confidence

High

EPSS

0.001

Percentile

26.7%

Memory leak in hw/9pfs/9p-proxy.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leveraging a missing cleanup operation in the proxy backend.

Affected configurations

Nvd
Node
qemuqemuRange<2.8.0
OR
qemuqemuMatch2.8.0rc0
OR
qemuqemuMatch2.8.0rc1
Node
debiandebian_linuxMatch8.0
VendorProductVersionCPE
qemuqemu*cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
qemuqemu2.8.0cpe:2.3:a:qemu:qemu:2.8.0:rc0:*:*:*:*:*:*
qemuqemu2.8.0cpe:2.3:a:qemu:qemu:2.8.0:rc1:*:*:*:*:*:*
debiandebian_linux8.0cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

AI Score

6

Confidence

High

EPSS

0.001

Percentile

26.7%