CVE-2016-2197
Fixed in a distro release EPSS <1%
QEMU (aka Quick Emulator) built with an IDE AHCI emulation support is vulnerable to a null pointer dereference flaw. It occurs while unmapping the Frame Information Structure (FIS) and Command List Block (CLB) entries. A privileged user inside guest could use this flaw to crash the QEMU process instance resulting in DoS.
Products: qemu
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | qemu | 1:2.6+dfsg-1 |
| Debian 13 | qemu | 1:2.6+dfsg-1 |
| Debian 14 | qemu | 1:2.6+dfsg-1 |
| SUSE Linux Enterprise Desktop 12 SP1 | qemu | 2.3.1-14.1 |
| SUSE Linux Enterprise Server 12 SP1 | qemu | 2.3.1-14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | qemu | 2.3.1-14.1 |
| Ubuntu 14.04 LTS | qemu | 2.0.0+dfsg-2ubuntu1.22 |