CVE-2016-4037: Medium severity red hat fedora vulnerability
The ehciadvancestate function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular split isochronous transfer descriptor (siTD) list, a related issue to CVE-2015-8558.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4037?
CVE-2016-4037 has a high severity rating due to its potential to cause a denial of service.
How do I fix CVE-2016-4037?
To mitigate CVE-2016-4037, users should update QEMU to version 2.6.0 or later.
What systems are affected by CVE-2016-4037?
CVE-2016-4037 affects various versions of Fedora, Ubuntu, and Debian systems running specific versions of QEMU.
What type of vulnerability is CVE-2016-4037?
CVE-2016-4037 is classified as a denial of service vulnerability due to the infinite loop caused by a circular split isochronous transfer descriptor.
Who can exploit CVE-2016-4037?
Local guest OS administrators are the only ones able to exploit CVE-2016-4037 to cause a denial of service.