Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2016-8669
Description:The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving a value of divider greater than baud base.
Test IDs: 1.3.6.1.4.1.25623.1.1.1.2.2016.679   1.3.6.1.4.1.25623.1.1.1.2.2016.678   1.3.6.1.4.1.25623.1.0.891497  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-8669
93563
http://www.securityfocus.com/bid/93563
GLSA-201611-11
https://security.gentoo.org/glsa/201611-11
RHSA-2017:2392
https://access.redhat.com/errata/RHSA-2017:2392
RHSA-2017:2408
https://access.redhat.com/errata/RHSA-2017:2408
[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update
https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html
[oss-security] 20161014 CVE request Qemu: char: divide by zero error in serial_update_parameters
http://www.openwall.com/lists/oss-security/2016/10/14/9
[oss-security] 20161015 Re: CVE request Qemu: char: divide by zero error in serial_update_parameters
http://www.openwall.com/lists/oss-security/2016/10/15/5
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=3592fe0c919cf27a81d8e9f9b4f269553418bb01
http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=3592fe0c919cf27a81d8e9f9b4f269553418bb01
openSUSE-SU-2016:3237
http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html




© 1998-2025 E-Soft Inc. All rights reserved.