CVE-2016-7161
Ubuntu Security Notice USN-3125-1
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.
Desbordamiento de búfer basado en memoría dinámica en la llamada de retorno .receive de xlnx.xps-ethernetlite en QEMU (también conocido como Quick Emulator) permite a atacantes ejecutar código arbitrario en el anfitrión QEMU a través de un paquete ethlite grande.
Zhenhao Hong discovered that QEMU incorrectly handled the Virtio module. A privileged attacker inside the guest could use this issue to cause QEMU to consume resources, resulting in a denial of service. Li Qiang discovered that QEMU incorrectly handled VMWARE VMXNET3 network card emulation support. A privileged attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu 16.10. Various other issues were also addressed.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2016-09-08 CVE Reserved
- 2016-10-05 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-787: Out-of-bounds Write
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=a0d1cbdacff5df4ded16b753b38fdd9da6092968 | X_refsource_confirm | |
| http://www.openwall.com/lists/oss-security/2016/09/23/6 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2016/09/23/8 | Mailing List |
|
| http://www.securityfocus.com/bid/93141 | Broken Link | |
| https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html | Mailing List |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01598.html | 2023-11-07 | |
| https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01877.html | 2023-11-07 |
| URL | Date | SRC |
|---|---|---|
| http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html | 2023-11-07 | |
| https://security.gentoo.org/glsa/201611-11 | 2023-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Qemu Search vendor "Qemu" | Qemu Search vendor "Qemu" for product "Qemu" | <= 2.6.2 Search vendor "Qemu" for product "Qemu" and version " <= 2.6.2" | - |
Affected
| ||||||
| Qemu Search vendor "Qemu" | Qemu Search vendor "Qemu" for product "Qemu" | 2.7.0 Search vendor "Qemu" for product "Qemu" and version "2.7.0" | rc0 |
Affected
| ||||||
| Qemu Search vendor "Qemu" | Qemu Search vendor "Qemu" for product "Qemu" | 2.7.0 Search vendor "Qemu" for product "Qemu" and version "2.7.0" | rc1 |
Affected
| ||||||
| Qemu Search vendor "Qemu" | Qemu Search vendor "Qemu" for product "Qemu" | 2.7.0 Search vendor "Qemu" for product "Qemu" and version "2.7.0" | rc2 |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 8.0 Search vendor "Debian" for product "Debian Linux" and version "8.0" | - |
Affected
| ||||||