ISOMAN

CVE

CVE-2016-2858

QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash) via an entropy request, which triggers arbitrary stack based allocation and memory corruption.

Severity
MEDIUM
CVSS
6.5
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu16.04.7 amd64 desktopunknownsource
Ubuntu16.04.6 i386 desktopunknownsource
Ubuntu16.04.7 amd64 serverunknownsource
Ubuntu16.04.6 i386 serverunknownsource

References

  1. http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=60253ed1e6ec6d8e5ef2efe7bf755f475dce9956
  2. http://www.openwall.com/lists/oss-security/2016/03/04/1
  3. http://www.openwall.com/lists/oss-security/2016/03/07/4
  4. http://www.securityfocus.com/bid/84134
  5. http://www.ubuntu.com/usn/USN-2974-1
  6. https://bugzilla.redhat.com/show_bug.cgi?id=1314676
  7. https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
  8. https://security.gentoo.org/glsa/201604-01
  9. http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=60253ed1e6ec6d8e5ef2efe7bf755f475dce9956
  10. http://www.openwall.com/lists/oss-security/2016/03/04/1
  11. http://www.openwall.com/lists/oss-security/2016/03/07/4
  12. http://www.securityfocus.com/bid/84134
  13. http://www.ubuntu.com/usn/USN-2974-1
  14. https://bugzilla.redhat.com/show_bug.cgi?id=1314676
  15. https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html
  16. https://security.gentoo.org/glsa/201604-01