CVE-2016-7995: Missing Release of Resource after Effective Lifetime

Memory leak in the ehciprocessitd function in hw/usb/hcd-ehci.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption via a large number of crafted buffer page select PG indexes...

PT-2016-7461

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A memory leak issue exists in the ehci process itd function, located in hw/usb/hcd-ehci.c, allowing local guest OS administrators to cause a denial of service by consuming memory via a large...

CVE-2016-4037: Uncontrolled Resource Consumption

The ehciadvancestate function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service infinite loop and CPU consumption via a circular split isochronous transfer descriptor siTD list, a related issue to CVE-2015-8558...