# CVEs published 2016-12-10

17 CVEs were published on December 10, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-4964](https://cve.now/CVE-2016-4964.md): The mptsas\_fetch\_requests function in hw/scsi/mptsas.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial o (no CVSS)
- [CVE-2016-6490](https://cve.now/CVE-2016-6490.md): The virtqueue\_map\_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of (no CVSS)
- [CVE-2016-6833](https://cve.now/CVE-2016-6833.md): Use-after-free vulnerability in the vmxnet3\_io\_bar0\_write function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS ad (no CVSS)
- [CVE-2016-6834](https://cve.now/CVE-2016-6834.md): The net\_tx\_pkt\_do\_sw\_fragmentation function in hw/net/net\_tx\_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to caus (no CVSS)
- [CVE-2016-6835](https://cve.now/CVE-2016-6835.md): The vmxnet\_tx\_pkt\_parse\_headers function in hw/net/vmxnet\_tx\_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to caus (no CVSS)
- [CVE-2016-6836](https://cve.now/CVE-2016-6836.md): The vmxnet3\_complete\_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensiti (no CVSS)
- [CVE-2016-6888](https://cve.now/CVE-2016-6888.md): Integer overflow in the net\_tx\_pkt\_init function in hw/net/net\_tx\_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to (no CVSS)
- [CVE-2016-7116](https://cve.now/CVE-2016-7116.md): Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to access host files out (no CVSS)
- [CVE-2016-7155](https://cve.now/CVE-2016-7155.md): hw/scsi/vmw\_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds access or (no CVSS)
- [CVE-2016-7156](https://cve.now/CVE-2016-7156.md): The pvscsi\_convert\_sglist function in hw/scsi/vmw\_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a deni (no CVSS)
- [CVE-2016-7157](https://cve.now/CVE-2016-7157.md): The (1) mptsas\_config\_manufacturing\_1 and (2) mptsas\_config\_ioc\_0 functions in hw/scsi/mptconfig.c in QEMU (aka Quick Emulator) allow local (no CVSS)
- [CVE-2016-7170](https://cve.now/CVE-2016-7170.md): The vmsvga\_fifo\_run function in hw/display/vmware\_vga.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial (no CVSS)
- [CVE-2016-7421](https://cve.now/CVE-2016-7421.md): The pvscsi\_ring\_pop\_req\_descr function in hw/scsi/vmw\_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a (no CVSS)
- [CVE-2016-7422](https://cve.now/CVE-2016-7422.md): The virtqueue\_map\_desc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of (no CVSS)
- [CVE-2016-7466](https://cve.now/CVE-2016-7466.md): Memory leak in the usb\_xhci\_exit function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator), when the xhci uses msix, allows local guest OS (no CVSS)
- [CVE-2016-7994](https://cve.now/CVE-2016-7994.md): Memory leak in the virtio\_gpu\_resource\_create\_2d function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS admi (no CVSS)
- [CVE-2016-7995](https://cve.now/CVE-2016-7995.md): Memory leak in the ehci\_process\_itd function in hw/usb/hcd-ehci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-12-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.