CVE-2016-2197
- State
- Published
- Severity
- Not scored
- Published
- Dec 29, 2016
- Updated
- Aug 5, 2024
- Reserved
- Jan 29, 2016
Description
QEMU (aka Quick Emulator) built with an IDE AHCI emulation support is vulnerable to a null pointer dereference flaw. It occurs while unmapping the Frame Information Structure (FIS) and Command List Block (CLB) entries. A privileged user inside guest could use this flaw to crash the QEMU process instance resulting in DoS.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 82235vdb-entry
- [qemu-devel] 20160129 CVE request Qemu: ide: ahci null pointer dereference when using FIS CLB enginesmailing-list
- GLSA-201604-01vendor-advisory
- [qemu-devel] 20160130 Re: CVE request Qemu: ide: ahci null pointer dereference when using FIS CLB enginesmailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=1302057
- [qemu-devel] 20160128 [PATCH v2] ide: ahci: add check before calling dma_memory_unmapmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.