CVE-2016-7422: Null Pointer Dereference
Quick emulator(Qemu) built with the virtio framework is vulnerable to a null pointer dereference flaw. It could occur if the guest was to set the I/O descriptor buffer length to a large value.
A privileged user inside guest could use this flaw to crash the Qemu instance on the host resulting in DoS.
Upstream fix: ------------- -> https://lists.gnu.org/archive/html/qemu-devel/2016-09/msg03546.html
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2016/09/16/4
Other sources
The virtqueuemapdesc function in hw/virtio/virtio.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via a large I/O descriptor buffer length value.
— MITRE
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-7422?
CVE-2016-7422 is classified as a denial of service (DoS) vulnerability due to a null pointer dereference flaw.
How do I fix CVE-2016-7422?
To fix CVE-2016-7422, update QEMU to a version higher than 2.7.1 that includes the relevant patches.
Which software versions are affected by CVE-2016-7422?
CVE-2016-7422 affects QEMU versions up to 2.7.1 and specific versions of Red Hat OpenStack and openSUSE.
Who can exploit CVE-2016-7422?
A privileged user inside the guest environment can exploit CVE-2016-7422 to crash the QEMU instance on the host.
What impact does CVE-2016-7422 have on systems?
The impact of CVE-2016-7422 is a potential denial of service, as it can cause the QEMU instance to crash.