CVE-2016-1714: Buffer Overflow
Last updated 24 July 2024
Other sources
Qemu emulator built with the Firmware Configuration device emulation support is vulnerable to an OOB r/w access issue. It could occur while processing firmware configurations, if the current configuration entry value was set to be invalid(FWCFGINVALID=0xffff).
A privileged(CAPSYSRAWIO) user/process inside guest could use this flaw to crash the Qemu process instance resulting in DoS OR potentially execute arbitrary code with privileges of the Qemu process on the host.
Upstream fix: ------------- -> https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg00428.html
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2016/01/12/10
— Red Hat
The (1) fwcfgwrite and (2) fwcfgread functions in hw/nvram/fwcfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAPSYSRAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2016-1714?
CVE-2016-1714 is a vulnerability in QEMU that allows guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service by triggering an out-of-bounds read or write access, leading to a process crash.
What is the severity of CVE-2016-1714?
The severity of CVE-2016-1714 is high with a severity value of 7 (out of 10).
How does CVE-2016-1714 impact QEMU?
CVE-2016-1714 can cause a denial of service in QEMU due to out-of-bounds read or write access and process crashes.
What versions of QEMU are affected by CVE-2016-1714?
The affected versions of QEMU include 1.0+, 2.0.0+dfsg-2ubuntu1.22, 1:2.3+dfsg-5ubuntu9.2, and later versions up to 1:3.1+dfsg-8+deb10u8, 1:3.1+dfsg-8+deb10u10, 1:5.2+dfsg-11+deb11u2, 1:7.2+dfsg-7+deb12u1, 1:8.1.0+ds-6, 1:8.1.1+ds-1.
How can I mitigate CVE-2016-1714?
Mitigating CVE-2016-1714 involves updating QEMU to a version that includes the fix for the vulnerability.