CVE-2016-7170: Out-of-bounds Read
The vmsvgafiforun function in hw/display/vmwarevga.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via vectors related to cursor.mask[] and cursor.image[] array sizes when processing a DEFINECURSOR svga command.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7170?
CVE-2016-7170 has a severity rating that indicates it can lead to a denial of service.
How do I fix CVE-2016-7170?
To fix CVE-2016-7170, users should update to a version of QEMU that is greater than or equal to 2.7.2.
What systems are affected by CVE-2016-7170?
CVE-2016-7170 affects QEMU versions up to 2.7.1 and specific versions of Debian and openSUSE.
What type of vulnerability is CVE-2016-7170?
CVE-2016-7170 is a local denial of service vulnerability caused by out-of-bounds write operations.
Can CVE-2016-7170 be exploited remotely?
CVE-2016-7170 cannot be exploited remotely as it requires local guest OS administrator access.