CVE-2016-7161: Buffer Overflow
Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7161?
CVE-2016-7161 is classified as a high severity vulnerability due to its potential for arbitrary code execution on the QEMU host.
How do I fix CVE-2016-7161?
To fix CVE-2016-7161, upgrade your QEMU version to 2.7.0 or later, as this version addresses the heap-based buffer overflow.
Which software versions are affected by CVE-2016-7161?
CVE-2016-7161 affects QEMU versions up to and including 2.6.2 and specific release candidate versions 2.7.0-rc0, 2.7.0-rc1, and 2.7.0-rc2.
What kind of attack can exploit CVE-2016-7161?
CVE-2016-7161 can be exploited by sending a large ethlite packet, leading to a heap-based buffer overflow that allows arbitrary code execution.
Is CVE-2016-7161 specific to any operating system?
CVE-2016-7161 is not exclusive to any operating system but has been noted in QEMU installations on Debian GNU/Linux 8.0.