deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-9793
Published: 2016-12-28
Description: The sock_setsockopt function in net/core/sock.c in the Linux kernel before 4.8.14 mishandles negative values of sk_sndbuf and sk_rcvbuf, which allows local users to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact by leveraging the CAP_NET_ADMIN capability for a crafted setsockopt system call with the (1) SO_SNDBUFFORCE or (2) SO_RCVBUFFORCE option.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b98b0bc8c431e3ceb4b26b0dfc8db509518fb290; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.14; http://www.openwall.com/lists/oss-security/2016/12/03/1
CVE: CVE-2016-9794
Published: 2016-12-28
Description: Race condition in the snd_pcm_period_elapsed function in sound/core/pcm_lib.c in the ALSA subsystem in the Linux kernel before 4.7 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted SNDRV_PCM_TRIGGER_START command.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362, CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3aa02cb664c5fb1042958c8d1aa8c35055a2ebc4; http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00057.html; http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00062.html
CVE: CVE-2016-9806
Published: 2016-12-28
Description: Race condition in the netlink_dump function in net/netlink/af_netlink.c in the Linux kernel before 4.6.3 allows local users to cause a denial of service (double free) or possibly have unspecified other impact via a crafted application that makes sendmsg system calls, leading to a free operation associated with a new dump that started earlier than anticipated.
CVSS Score: 7.8 (HIGH)
CWE: CWE-362, CWE-415
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=92964c79b357efd980812c4de5c1fd2ec8bb5520; http://lists.openwall.net/netdev/2016/05/15/69; http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.3
CVE: CVE-2016-2246
Published: 2016-12-29
Description: HP ThinPro 4.4 through 6.1 mishandles the keyboard layout control panel and virtual keyboard application, which allows local users to bypass intended access restrictions and gain privileges via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05291676; http://www.securityfocus.com/bid/93904; http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c05291676
CVE: CVE-2016-5328
Published: 2016-12-29
Description: VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200, CWE-254
References: http://www.securityfocus.com/bid/93886; http://www.securitytracker.com/id/1037102; http://www.vmware.com/security/advisories/VMSA-2016-0017.html
CVE: CVE-2016-5329
Published: 2016-12-29
Description: VMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/93888; http://www.securitytracker.com/id/1037103; http://www.vmware.com/security/advisories/VMSA-2016-0017.html
CVE: CVE-2016-5334
Published: 2016-12-29
Description: VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-668
References: http://www.securityfocus.com/bid/94482; http://www.securitytracker.com/id/1037326; http://www.vmware.com/security/advisories/VMSA-2016-0021.html
CVE: CVE-2016-7079
Published: 2016-12-29
Description: The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vulnerability than CVE-2016-7080.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/92938; http://www.securitytracker.com/id/1036804; http://www.vmware.com/security/advisories/VMSA-2016-0014.html
CVE: CVE-2016-7080
Published: 2016-12-29
Description: The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vulnerability than CVE-2016-7079.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://www.securityfocus.com/bid/92938; http://www.securitytracker.com/id/1036804; http://www.vmware.com/security/advisories/VMSA-2016-0014.html
CVE: CVE-2016-7081
Published: 2016-12-29
Description: Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS via unspecified vectors.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/92935; http://www.securitytracker.com/id/1036805; http://www.vmware.com/security/advisories/VMSA-2016-0014.html
CVE: CVE-2016-7082
Published: 2016-12-29
Description: VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via an EMF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/92934; http://www.securitytracker.com/id/1036805; http://www.vmware.com/security/advisories/VMSA-2016-0014.html
CVE: CVE-2016-7083
Published: 2016-12-29
Description: VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via TrueType fonts embedded in EMFSPOOL.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/92934; http://www.securitytracker.com/id/1036805; http://www.vmware.com/security/advisories/VMSA-2016-0014.html
CVE: CVE-2016-7084
Published: 2016-12-29
Description: tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via a JPEG 2000 image.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/92934; http://www.securitytracker.com/id/1036805; http://www.vmware.com/security/advisories/VMSA-2016-0014.html
CVE: CVE-2016-7085
Published: 2016-12-29
Description: Untrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.securityfocus.com/bid/92940; http://www.securitytracker.com/id/1036805; http://www.vmware.com/security/advisories/VMSA-2016-0014.html
CVE: CVE-2016-7086
Published: 2016-12-29
Description: The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/92941; http://www.securitytracker.com/id/1036805; http://www.vmware.com/security/advisories/VMSA-2016-0014.html
CVE: CVE-2016-7087
Published: 2016-12-29
Description: Directory traversal vulnerability in the Connection Server in VMware Horizon View 5.x before 5.3.7, 6.x before 6.2.3, and 7.x before 7.0.1 allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/93455; http://www.securitytracker.com/id/1036972; http://www.vmware.com/security/advisories/VMSA-2016-0015.html
CVE: CVE-2016-7456
Published: 2016-12-29
Description: VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remote attackers to obtain login access via an SSH session.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-255
References: http://www.securityfocus.com/bid/94990; http://www.securitytracker.com/id/1037502; http://www.vmware.com/security/advisories/VMSA-2016-0024.html
CVE: CVE-2016-7457
Published: 2016-12-29
Description: VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain privileges, or halt and remove virtual machines, via unspecified vectors.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-264
References: http://www.securityfocus.com/bid/93499; http://www.securitytracker.com/id/1036999; http://www.vmware.com/security/advisories/VMSA-2016-0016.html
CVE: CVE-2016-7458
Published: 2016-12-29
Description: VMware vSphere Client 5.5 before U3e and 6.0 before U2a allows remote vCenter Server and ESXi instances to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-611
References: http://www.securityfocus.com/bid/94483; http://www.securitytracker.com/id/1037328; http://www.vmware.com/security/advisories/VMSA-2016-0022.html
CVE: CVE-2016-7459
Published: 2016-12-29
Description: VMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read arbitrary files via a (1) Log Browser, (2) Distributed Switch setup, or (3) Content Library XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Score: 7.7 (HIGH)
CWE: CWE-611
References: http://www.securityfocus.com/bid/94486; http://www.securitytracker.com/id/1037329; http://www.vmware.com/security/advisories/VMSA-2016-0022.html
CVE: CVE-2016-7460
Published: 2016-12-29
Description: The Single Sign-On feature in VMware vCenter Server 5.5 before U3e and 6.0 before U2a and vRealize Automation 6.x before 6.2.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: http://www.securityfocus.com/bid/94485; http://www.securitytracker.com/id/1037327; http://www.securitytracker.com/id/1037329
CVE: CVE-2016-7461
Published: 2016-12-29
Description: The drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware Workstation Player 12.x before 12.5.2 and VMware Fusion and Fusion Pro 8.x before 8.5.2 allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (out-of-bounds memory access on the host OS) via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/94280; http://www.securitytracker.com/id/1037282; http://www.vmware.com/security/advisories/VMSA-2016-0019.html
CVE: CVE-2016-7462
Published: 2016-12-29
Description: The Suite REST API in VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to write arbitrary content to files or rename files via a crafted DiskFileItem in a relay-request payload that is mishandled during deserialization.
CVSS Score: 8.5 (HIGH)
CWE: CWE-264, CWE-749
References: http://www.securityfocus.com/bid/94351; http://www.securitytracker.com/id/1037297; http://www.vmware.com/security/advisories/VMSA-2016-0020.html
CVE: CVE-2016-7463
Published: 2016-12-29
Description: Cross-site scripting (XSS) vulnerability in the Host Client in VMware vSphere Hypervisor (aka ESXi) 5.5 and 6.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted VM.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/94998; http://www.securitytracker.com/id/1037501; http://www.vmware.com/security/advisories/VMSA-2016-0023.html
CVE: CVE-2016-9877
Published: 2016-12-29
Description: An issue was discovered in Pivotal RabbitMQ 3.x before 3.5.8 and 3.6.x before 3.6.6 and RabbitMQ for PCF 1.5.x before 1.5.20, 1.6.x before 1.6.12, and 1.7.x before 1.7.7. MQTT (MQ Telemetry Transport) connection authentication with a username/password pair succeeds if an existing username is provided but the password is omitted from the connection request. Connections that use TLS with a client-provided certificate are not affected.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-284
References: http://www.debian.org/security/2017/dsa-3761; http://www.securityfocus.com/bid/95065; https://pivotal.io/security/cve-2016-9877
CVE: CVE-2016-9878
Published: 2016-12-29
Description: An issue was discovered in Pivotal Spring Framework before 3.2.18, 4.2.x before 4.2.9, and 4.3.x before 4.3.5. Paths provided to the ResourceServlet were not properly sanitized and as a result exposed to directory traversal attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.oracle.com/technetwork/security-advisory/cpuapr2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpujan2[PII_REDACTED].html; http://www.oracle.com/technetwork/security-advisory/cpujul2[PII_REDACTED].html
CVE: CVE-2015-0854
Published: 2016-12-29
Description: App/HelperFunctions.pm in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Show in Folder" action.
CVSS Score: 7.8 (HIGH)
CWE: CWE-19
References: https://bugs.launchpad.net/shutter/+bug/1495163; https://bugs.launchpad.net/shutter/+bug/1495163
CVE: CVE-2016-10081
Published: 2016-12-29
Description: /usr/bin/shutter in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Run a plugin" action.
CVSS Score: 7.8 (HIGH)
CWE: CWE-19
References: http://www.securityfocus.com/bid/95351; https://bugs.launchpad.net/shutter/+bug/1652600; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QG54GTU45KBIQJLU4WREG4G4JJEUTEJ/
CVE: CVE-2016-9891
Published: 2016-12-29
Description: Cross-site scripting (XSS) vulnerability in admin/media.php and admin/media_item.php in Dotclear before 2.11 allows remote authenticated users to inject arbitrary web script or HTML via the upfiletitle or media_title parameter (aka the media title).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95156; https://dev.dotclear.org/2.0/changeset/5536ac77e915; https://dev.dotclear.org/2.0/ticket/2224
CVE: CVE-2015-8701
Published: 2016-12-29
Description: QEMU (aka Quick Emulator) built with the Rocker switch emulation support is vulnerable to an off-by-one error. It happens while processing transmit (tx) descriptors in 'tx_consume' routine, if a descriptor was to have more than allowed (ROCKER_TX_FRAGS_MAX=16) fragments. A privileged user inside guest could use this flaw to cause memory leakage on the host or crash the QEMU process instance resulting in DoS issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-193
References: http://www.openwall.com/lists/oss-security/2015/12/28/6; http://www.openwall.com/lists/oss-security/2015/12/29/1; http://www.securityfocus.com/bid/79706
CVE: CVE-2015-8743
Published: 2016-12-29
Description: QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing 'ioport' r/w operations. A privileged (CAP_SYS_RAWIO) user/process could use this flaw to leak or corrupt QEMU memory bytes.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-787
References: http://www.debian.org/security/2016/dsa-3469; http://www.debian.org/security/2016/dsa-3470; http://www.debian.org/security/2016/dsa-3471
CVE: CVE-2015-8744
Published: 2016-12-29
Description: QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It occurs when a guest sends a Layer-2 packet smaller than 22 bytes. A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=a7278b36fcab9af469563bd7b; http://www.debian.org/security/2016/dsa-3471; http://www.openwall.com/lists/oss-security/2016/01/04/3
CVE: CVE-2015-8745
Published: 2016-12-29
Description: QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It could occur while reading Interrupt Mask Registers (IMR). A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-617
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c6048f849c7e3f009786df76206e895; http://www.debian.org/security/2016/dsa-3471; http://www.openwall.com/lists/oss-security/2016/01/04/4
CVE: CVE-2015-8817
Published: 2016-12-29
Description: QEMU (aka Quick Emulator) built to use 'address_space_translate' to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pci_dma_read/write calls. Affects QEMU versions >= 1.6.0 and <= 2.3.1. A privileged user inside guest could use this flaw to crash the guest instance resulting in DoS.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-787
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=23820dbfc79d1c9dce090b4c555994f2bb6a69b3; http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=c3c1bb99d1c11978d9ce94d1bdcf0705378c1459; http://rhn.redhat.com/errata/RHSA-2016-2670.html
CVE: CVE-2015-8818
Published: 2016-12-29
Description: The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.
CVSS Score: 5.5 (MEDIUM)
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b242e0e0e2969c044a318e56f7988bbd84de1f63; http://rhn.redhat.com/errata/RHSA-2016-2670.html; http://rhn.redhat.com/errata/RHSA-2016-2671.html
CVE: CVE-2016-1922
Published: 2016-12-29
Description: QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'current_cpu' remains null, which leads to the null pointer dereference. A user or process could use this flaw to crash the QEMU instance, resulting in DoS issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.debian.org/security/2016/dsa-3469; http://www.debian.org/security/2016/dsa-3470; http://www.debian.org/security/2016/dsa-3471
CVE: CVE-2016-1981
Published: 2016-12-29
Description: QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the initial receive/transmit descriptor head (TDH/RDH) is set outside the allocated descriptor buffer. A privileged user inside guest could use this flaw to crash the QEMU instance resulting in DoS.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://rhn.redhat.com/errata/RHSA-2016-2585.html; http://www.debian.org/security/2016/dsa-3469; http://www.debian.org/security/2016/dsa-3470
CVE: CVE-2016-2197
Published: 2016-12-29
Description: QEMU (aka Quick Emulator) built with an IDE AHCI emulation support is vulnerable to a null pointer dereference flaw. It occurs while unmapping the Frame Information Structure (FIS) and Command List Block (CLB) entries. A privileged user inside guest could use this flaw to crash the QEMU process instance resulting in DoS.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2016/01/29/2; http://www.openwall.com/lists/oss-security/2016/01/30/1; http://www.securityfocus.com/bid/82235
CVE: CVE-2016-2198
Published: 2016-12-29
Description: QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: http://www.openwall.com/lists/oss-security/2016/01/29/6; http://www.openwall.com/lists/oss-security/2016/01/30/2; https://bugzilla.redhat.com/show_bug.cgi?id=1301643
CVE: CVE-2016-9776
Published: 2016-12-29
Description: QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-835
References: http://www.openwall.com/lists/oss-security/2016/12/02/3; http://www.openwall.com/lists/oss-security/2016/12/02/8; http://www.securityfocus.com/bid/94638
CVE: CVE-2016-9845
Published: 2016-12-29
Description: QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to an information leakage issue. It could occur while processing 'VIRTIO_GPU_CMD_GET_CAPSET_INFO' command. A guest user/process could use this flaw to leak contents of the host memory bytes.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2016/12/05/15; http://www.openwall.com/lists/oss-security/2016/12/05/22; http://www.securityfocus.com/bid/94763
CVE: CVE-2016-9846
Published: 2016-12-29
Description: QEMU (aka Quick Emulator) built with the Virtio GPU Device emulator support is vulnerable to a memory leakage issue. It could occur while updating the cursor data in update_cursor_data_virgl. A guest user/process could use this flaw to leak host memory bytes, resulting in DoS for a host.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2016/12/05/18; http://www.openwall.com/lists/oss-security/2016/12/05/23; http://www.securityfocus.com/bid/94765
CVE: CVE-2016-9913
Published: 2016-12-29
Description: Memory leak in the v9fs_device_unrealize_common function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) via vectors involving the order of resource cleanup.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=4774718e5c194026ba5ee7a28d9be49be3080e42; http://www.openwall.com/lists/oss-security/2016/12/06/11; http://www.openwall.com/lists/oss-security/2016/12/08/7
CVE: CVE-2016-9914
Published: 2016-12-29
Description: Memory leak in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leveraging a missing cleanup operation in FileOperations.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=702dbcc274e2ca43be20ba64c758c0ca57dab91d; http://www.openwall.com/lists/oss-security/2016/12/06/11; http://www.openwall.com/lists/oss-security/2016/12/08/7