CVE-2016-2197

QEMU (aka Quick Emulator) built with an IDE AHCI emulation support is vulnerable to a null pointer dereference flaw. It occurs while unmapping the Frame Information Structure (FIS) and Command List Block (CLB) entries. A privileged user inside guest could use this flaw to crash the QEMU process instance resulting in DoS.

• CWE-476

• http://www.openwall.com/lists/oss-security/2016/01/29/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/01/30/1Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/82235Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1302057Issue Tracking
• https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg05742.htmlPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201604-01Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/01/29/2Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/01/30/1Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/82235Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1302057Issue Tracking
• https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg05742.htmlPatch, Vendor Advisory
• https://security.gentoo.org/glsa/201604-01Third Party Advisory

Published

Dec 29, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-2191The bmp_read_rows function in pngxtern/pngxrbmp.c in OptiPNG…
• CVE-2016-2192PostgreSQL PL/Java before 1.5.0 allows remote authenticated …6.5
• CVE-2016-2193PostgreSQL before 9.5.x before 9.5.2 does not properly maint…
• CVE-2016-2194The ressol function in Botan before 1.10.11 and 1.11.x befor…
• CVE-2016-2195Integer overflow in the PointGFp constructor in Botan before…
• CVE-2016-2196Heap-based buffer overflow in the P-521 reduction function i…
• CVE-2016-2198QEMU (aka Quick Emulator) built with the USB EHCI emulation …5.5
• CVE-2016-2199Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2016-2200Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remot…
• CVE-2016-2201Siemens SIMATIC S7-1500 CPU devices before 1.8.3 allow remot…
• CVE-2016-2202The Inventory Solution component in the Management Agent in …
• CVE-2016-2203The management console on Symantec Messaging Gateway (SMG) A…