Ubuntu.comUB:CVE-2016-2538CVE-2016-2538
7.1 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
3.6 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:N/A:P
0.001 Low
EPSS
Percentile
23.0%
Multiple integer overflows in the USB Net device emulator
(hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest OS
administrators to cause a denial of service (QEMU process crash) or obtain
sensitive host memory information via a remote NDIS control message packet
that is mishandled in the (1) rndis_query_response, (2) rndis_set_response,
or (3) usb_net_handle_dataout function.
Bugs
References
www.openwall.com/lists/oss-security/2016/02/22/3
launchpad.net/bugs/cve/CVE-2016-2538
lists.gnu.org/archive/html/qemu-devel/2016-02/msg03658.html
nvd.nist.gov/vuln/detail/CVE-2016-2538
security-tracker.debian.org/tracker/CVE-2016-2538
ubuntu.com/security/notices/USN-2974-1
www.cve.org/CVERecord?id=CVE-2016-2538
Related
7.1 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
3.6 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:N/A:P
0.001 Low
EPSS
Percentile
23.0%