CVE-2016-2198

Publication date

2016-12-29 22:00:00

Family

redhat

State

PUBLISHED

Description

QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.