VDB
DEBIAN-CVE-2016-4952
DEBIAN-CVE-2016-4952
PUBLISHED
CVSS 6 MEDIUM
QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds array access) via vectors related to the (1) PVSCSI_CMD_SETUP_RINGS or (2) PVSCSI_CMD_SETUP_MSG_RING SCSI command.
Risk Scores
CVSS 3.1
6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | qemu | 0 |
| Debian:12 | qemu | 0 |
| Debian:13 | qemu | 0 |
Timeline
- Sep 2, 2016 CVE Published
- Sep 22, 2026 CVE Updated