CVE-2016-3077: Buffer Overflow
It was found that parsing complicated kernel version numbers leads to array index out-of-bounds exception in VersionMapper.fromKernelVersionString method. A malicious user with access to VM could configure it so that it reports a version number that causes API to crash. When the VM with crafted kernel version number is reported among with other VMs, the representation retrieving operation will fail also for all other VMs.
Product bug:
https://bugzilla.redhat.com/showbug.cgi?id=1311616
Other sources
The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated users to cause a denial of service (process crash) for all VMs.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3077?
CVE-2016-3077 has a moderate severity level due to its potential to cause crashes in affected systems.
How do I fix CVE-2016-3077?
To fix CVE-2016-3077, update the Red Hat oVirt Engine to the latest patched version provided by Red Hat.
Who is affected by CVE-2016-3077?
The vulnerability CVE-2016-3077 affects users of Red Hat oVirt Engine when parsing kernel version numbers.
What causes the CVE-2016-3077 vulnerability?
CVE-2016-3077 is caused by an array index out-of-bounds exception within the VersionMapper.fromKernelVersionString method.
Can CVE-2016-3077 be exploited remotely?
CVE-2016-3077 can potentially be exploited by a malicious user with access to the virtual machine environment.